Description
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Published: 2026-11-01
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote Command Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is an OS command injection in the WireGuard CLI handler on the WAVLINK WN553X1-B router. By manipulating the file_id argument to sub_419DA8 in /bin/ioos, an attacker can execute arbitrary shell commands. The flaw allows full remote code execution with the privileges of the router process, compromising confidentiality, integrity, and availability.

Affected Systems

This issue affects WAVLINK WN553X1-B routers running firmware V260403_2.0.0. The affected component is the WireGuard CLI Handler within /bin/ioos. The vendor product is the WN553X1-B model, and the firmware version indicated in the advisory is V260403_2.0.0.

Risk and Exploitability

The CVSS base score of 9.4 indicates a critical impact. The public exploit is available, and the flaw is reachable remotely via the WireGuard CLI. The EPSS score is not available; KEV does not list this vulnerability yet. The attack vector likely requires network connectivity to the router’s management interface that exposes the WireGuard CLI. Successful exploitation grants full command‑execution privileges on the device.

Generated by OpenCVE AI on November 1, 2026 at 19:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official firmware update that addresses the command injection flaw.
  • Disable the WireGuard CLI or block its network access if an update is unavailable.
  • Restrict remote access to the router’s management interface and enforce strong authentication.
  • Configure firewall rules to block traffic to the /bin/ioos endpoint from untrusted sources.

Generated by OpenCVE AI on November 1, 2026 at 19:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 01 Nov 2026 18:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Title WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection
First Time appeared Wavlink
Wavlink wn553x1-b
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:wavlink:wn553x1-b:*:*:*:*:*:*:*:*
Vendors & Products Wavlink
Wavlink wn553x1-b
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Wavlink Wn553x1-b
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-01T18:00:18.146Z

Reserved: 2026-10-31T20:14:21.935Z

Link: CVE-2026-120239

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-01T18:17:13.920

Modified: 2026-11-01T18:17:13.920

Link: CVE-2026-120239

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-01T19:30:10Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')