Vulnerability · Published Nov 1, 2026 · Assigned by VulDB

CVE-2026-120278WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication

Medium 5.3

In plain English

A medium-severity missing authentication in WN536AX6-A from WAVLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.4%top 66.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

Affected products (as reported)

Vendor	Product	Versions
WAVLINK	WN536AX6-A	V260507_2.0.0

Weakness: CWE-306, CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References

VDB-429622 | WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication vdb-entry, technical-description
VDB-429622 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-120278 | CVE Analysis and Report third-party-advisory
Submit #919506 | Wavlink Router Firmware V260507_2.0.0 Exposure of Sensitive Information third-party-advisory
https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_vpn_list_info_disclosure.md exploit