Critical 10.0

A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the...

CVE-2026-120345 First seen on SecPulse 14:15

Original description The description as published by the source.

A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Critical 10.0; CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4: Critical 9.3; CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Published: Nov 2, 2026
First seen on SecPulse: 14:15
GHSA: GHSA-5m3x-rp28-cf8g
CWE: CWE-77 CWE-78

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-78 CWE-77

All

Wavlink Wn551X3 A

Detection sources

NIST National Vulnerability Database15:17
GitHub Security Advisories (Global)15:31
CVE.org (CVE Program・cvelistV5)14:15