Skip to content
Sign in Sign up
JA EN FR
SecPulse
A detailed explainer is available in Japanese. Read the Japanese explainer
Critical 9.9

WAVLINK WN701AEでコマンド実行の脆弱性、PoC公開

CVE-2026-120227 First seen on SecPulse

Summary

WAVLINK WN701AEのWeb管理機能に、OSコマンドを実行される脆弱性が見つかり、攻撃に使える情報も公開されています。M01AE_V260105を使う組織は、機器を洗い出してベンダーの告知で修正版を確認し、管理画面に届く範囲を絞ってください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

WAVLINK WN701AEのWeb管理機能に、OSコマンドを実行される脆弱性が見つかり、攻撃に使える情報も公開されています。M01AE_V260105を使う組織は、機器を洗い出してベンダーの告知で修正版を確認し、管理画面に届く範囲を絞ってください。

Original description The description as published by the source.

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details