Critical severity9.9NVD Advisory· Published Nov 2, 2026

CVE-2026-120282

Description

A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wavlink/WN536AX6-Allm-fuzzy
Range: V260507

Patches

Vulnerability mechanics

References

github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_mac.mdnvd
vuldb.com/cve/CVE-2026-120282nvd
vuldb.com/submit/919791nvd
vuldb.com/vuln/429626nvd
vuldb.com/vuln/429626/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000