Vulnerability · Published Nov 2, 2026 · Assigned by VulDB

CVE-2026-120280WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection

Critical 10.0

In plain English

A critical-severity OS command injection in WN536AX6-A from WAVLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)2.0%top 19.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Affected products (as reported)

Vendor	Product	Versions
WAVLINK	WN536AX6-A	V260507

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-429624 | WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection vdb-entry, technical-description
VDB-429624 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-120280 | CVE Analysis and Report third-party-advisory
Submit #919789 | WAVLINK WN536AX6 V260507 CWE-78 third-party-advisory
https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_group_id.md exploit