Skip to content
VulnCrestRadar

Search vulnerabilities

Search CVE ids, WordPress plugins or keywords

Report an incidentReport
← Database
CVE-2026-120281

WAVLINK WN536AX6-A V260507.

CVSS 4.0
9.3 critical
CISA KEV
Not listed
Technical details
Weakness
CWE-119, CWE-121
EPSS · 08 Nov 2026
0.58% · p48
Public resources
None found
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

No VulnCrest analysis published for this CVE yet. Below is the original CNA/NVD description, unmodified.

Description

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

Exploits & detection

No public PoC or detection template found yet.

Timeline

  • Published: 02 Nov 2026
  • Last modified upstream: 06 Nov 2026

Sources & licenses

CVE / CVSS / CWE
NVD record ↗ (unmodified). This product uses the NVD API but is not endorsed or certified by the NVD. CVE® © The MITRE Corporation.
Exploitation
CISA KEV (CC0) · EPSS by FIRST.org
References used for the analysis
Analysis, summary and remediation
© VulnCrest

View JSON