CVE-2026-120345

Publié : 2 novembre 2026

Modifié : 2 novembre 2026

Score CVSS

CRITICAL

Description détaillée

A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Références et Patchs

https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN551X3-A%20Router/WAVLINK_WN551X3-A_dns_resolution_command_injection.md https://vuldb.com/cve/CVE-2026-120345 https://vuldb.com/submit/919579 https://vuldb.com/vuln/429670 https://vuldb.com/vuln/429670/cti

Dernières Vulnérabilités

CVE-2026-120349

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

VOIR DÉTAILS

CVE-2026-101186

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

VOIR DÉTAILS

CVE-2026-101185

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

VOIR DÉTAILS