{"id":"CVE-2026-120198","title":"WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection","summary":"A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to…","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-77","CWE-74"],"vendor":"WAVLINK","product":"WL-WN530BE1-A","affected":["WL-WN530BE1-A V251117"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-11-02T14:20:05.950832Z"},"exploitAvailable":true,"published":"2026-11-01","updated":"2026-11-02","sourceUpdated":"2026-11-02T14:20:19.342Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-120198","references":[{"url":"https://vuldb.com/vuln/429561","label":"VDB-429561 | WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection"},{"url":"https://vuldb.com/vuln/429561/cti","label":"VDB-429561 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-120198","label":"CVE-2026-120198 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/918551","label":"Submit #918551 | WAVLINK WL-WN530BE1-A V251117 CWE-77"},{"url":"https://github.com/pipiyyb/cve/blob/main/WN530BE1.md"}],"tags":["cve.org","exploit-available"],"epss":0.0207,"epssPercentile":0.81484,"ingestedAt":"2026-11-05T19:30:42.649Z","slug":"CVE-2026-120198","body":"## Overview\n\nA vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.\n\n## Affected\n\n- `WL-WN530BE1-A V251117`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":55,"likelihood":0.4,"exploitation":12,"ransomware":0},"changes":[]}