CVE-2026-120198

CRITICAL 10.0CVE-2026-120198 · Published 01/11/2026 · updated 02/11/2026

In short

CVE-2026-120198 is a CRITICAL (CVSS 10.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

References

pipiyyb/cve
vuldb.com/cve/CVE-2026-120198
vuldb.com/submit/918551
vuldb.com/vuln/429561
vuldb.com/vuln/429561/cti

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free