Skip to content
Sign in Sign up
JA EN FR
SecPulse
A detailed explainer is available in Japanese. Read the Japanese explainer
Critical 9.9

WAVLINK WN701AEにOSコマンド実行の脆弱性、PoC公開

CVE-2026-120230 First seen on SecPulse

Summary

WAVLINK WN701AEの管理機能にOSコマンドインジェクションの脆弱性が公表され、攻撃コードも公開されています。該当機器を使う組織は版を確認し、管理画面へ届く範囲を絞ったうえで、ベンダーの告知で修正版の有無を調べてください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

WAVLINK WN701AEの管理機能にOSコマンドインジェクションの脆弱性が公表され、攻撃コードも公開されています。該当機器を使う組織は版を確認し、管理画面へ届く範囲を絞ったうえで、ベンダーの告知で修正版の有無を調べてください。

Original description The description as published by the source.

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details