https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-120240/https://vulnfeed.org/cve/CVE-2026-120240/Sun, 01 Nov 2026 19:16:57 +0000A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.https://vulnfeed.org/cve/CVE-2026-120239/https://vulnfeed.org/cve/CVE-2026-120239/Sun, 01 Nov 2026 18:00:18 +0000A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.https://vulnfeed.org/cve/CVE-2026-120238/https://vulnfeed.org/cve/CVE-2026-120238/Sun, 01 Nov 2026 17:45:17 +0000A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.https://vulnfeed.org/cve/CVE-2026-120231/https://vulnfeed.org/cve/CVE-2026-120231/Sun, 01 Nov 2026 14:45:17 +0000A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.https://vulnfeed.org/cve/CVE-2026-120229/https://vulnfeed.org/cve/CVE-2026-120229/Sun, 01 Nov 2026 14:18:53 +0000A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.https://vulnfeed.org/cve/CVE-2026-120228/https://vulnfeed.org/cve/CVE-2026-120228/Sun, 01 Nov 2026 13:45:13 +0000A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.