CVE-2026-113802
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection…
- Risk score
- 81/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 2.9%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The Wavlink WL-WN530BE1-A firmware has an OS command injection vulnerability in the ioos binary, allowing a remote attacker to execute arbitrary commands as root without authentication.
- Affected
- {'product': 'Wavlink WL-WN530BE1-A firmware', 'version': 'through M30BE1_V251117'}
- Fix
- Check the linked advisory for a fix
- Exploitation
- No known exploitation
Why it is Red
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.
Last activity 20 Oct 2026. Patch Forecast updates every hour.