CVE-2026-113802Critical· 9.8▾ AbyssalPoC available

Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler

▾ Abyssal zone — Critical with a public exploit or in-the-wild use

Depth score67/ 100 · Elevated

impact 53.9 · likelihood 0.7 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Oct 20, 2026

Updated

Oct 21, 2026

CVSS

9.8

Vendor

Wavlink

Product

WL-WN530BE1-A

CWE

CWE-78

Depth score

67 · Elevated

EPSS

3.5% · p89

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

decided 2026-10-21

Exploitation: poc
Automatable: yes
Technical impact: total

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 21.

2.9% → 3.5%▲ 0.6%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

5 events · 6 days

Oct 20, 2026Published
Disclosed via CVEORG
Oct 21, 2026Record revised
Last analysed / modified upstream
Oct 21, 2026EPSS first tracked
2.9%
Oct 21, 2026Public exploit observed
Exploit / PoC code exists
Oct 26, 2026EPSS peak
2.9% → 3.5%

Wavlink CWE-78 #cve.org #exploit-available

Affected

WL-WN530BE1-A M30BE1_V251117

Full technical detail▾

Overview

Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.

Affected

WL-WN530BE1-A M30BE1_V251117

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 21, 2026Public exploit / PoC published

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org#exploit-available

← Back to feed

CVE-2026-113802Critical· 9.8▾ AbyssalPoC available

Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler

▾ Abyssal zone — Critical with a public exploit or in-the-wild use

Depth score67/ 100 · Elevated

impact 53.9 · likelihood 0.7 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Oct 20, 2026

Updated

Oct 21, 2026

CVSS

9.8

Vendor

Wavlink

Product

WL-WN530BE1-A

CWE

CWE-78

Depth score

67 · Elevated

EPSS

3.5% · p89

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

decided 2026-10-21

Exploitation: poc
Automatable: yes
Technical impact: total

EPSS history

Exploit-prediction probability, daily snapshots since Oct 21.

2.9% → 3.5%▲ 0.6%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

5 events · 6 days

Oct 20, 2026Published
Disclosed via CVEORG
Oct 21, 2026Record revised
Last analysed / modified upstream
Oct 21, 2026EPSS first tracked
2.9%
Oct 21, 2026Public exploit observed
Exploit / PoC code exists
Oct 26, 2026EPSS peak
2.9% → 3.5%

Wavlink CWE-78 #cve.org #exploit-available

Affected

WL-WN530BE1-A M30BE1_V251117

Full technical detail▾

Overview

Affected

WL-WN530BE1-A M30BE1_V251117

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 21, 2026Public exploit / PoC published

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org#exploit-available