Description
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Published: 2026-11-01
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote OS Command Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a command injection flaw in the WAVLINK WN553X1‑B router's WireGuard CLI group handler. Exploiting the sub_41A748 function in /bin/ioos by manipulating the group_id or group_name arguments allows an attacker to inject arbitrary operating‑system commands. Once executed, the attacker can gain full control of the device, compromising confidentiality, integrity, and availability.

Affected Systems

This issue affects the WN553X1‑B model running firmware V260403_2.0.0. No other variants or firmware versions have been confirmed as vulnerable in the advisory. The flaw is present in the '/bin/ioos' component that processes WireGuard CLI group commands.

Risk and Exploitability

The flaw carries a CVSS score of 9.4, indicating critical severity, but the EPSS score is unknown, and it is not listed in the CISA KEV catalog. The vulnerability can be exercised from a remote location via the router's management interface or any exposed WireGuard CLI entry point. The vendor has been notified, and the exploit is publicly available, so immediate remediation is recommended.

Generated by OpenCVE AI on November 1, 2026 at 19:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware update that addresses the command injection in the WireGuard CLI functionality.
  • If an update is not yet available, disable the WireGuard CLI or block remote access to it using firewall or ACL rules.
  • Restrict remote management of the router to trusted network segments or VPN tunnels, preventing untrusted hosts from issuing CLI commands.
  • Enable logging for WireGuard CLI activity and monitor logs for suspicious group_id or group_name input patterns that could indicate an attempted injection.

Generated by OpenCVE AI on November 1, 2026 at 19:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 01 Nov 2026 18:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Title WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection
First Time appeared Wavlink
Wavlink wn553x1-b
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:wavlink:wn553x1-b:*:*:*:*:*:*:*:*
Vendors & Products Wavlink
Wavlink wn553x1-b
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Wavlink Wn553x1-b
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-01T18:30:11.233Z

Reserved: 2026-10-31T20:14:25.434Z

Link: CVE-2026-120240

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-01T19:16:57.950

Modified: 2026-11-01T19:16:57.950

Link: CVE-2026-120240

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-01T19:30:10Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')