CVE-2026-120281Critical· 10.0▾ MidnightA vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.6%
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
WN536AX6-A V260507Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109109Critical· 10.0A vulnerability was detected in Wavlink WL-WN530BE1-A 251117
CVE-2026-120276Critical· 10.0WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
CVE-2026-120278Medium· 5.3WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
CVE-2026-120282Critical· 9.9WAVLINK WN536AX6-A protocol.csp host_black os command injection
CVE-2026-120279Critical· 10.0WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection
CVE-2026-120277Critical· 10.0WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection