New security notices published since yesterday. This batch includes a NIST entry describing an os command injection in WAVLINK firmware. The vendor was contacted early and an exploit has been made public. Updated 03 Nov 2026 00:00 GMT.
Top items
NIST
CVE-2026-120276
WAVLINK WN536AX6-A V260507_2.0.0 contains a weakness in sub_416760 of /bin/ioos in the Web Management Interface. Manipulation of the group_name argument causes os command injection, the issue can be triggered remotely, and a public exploit exists; the vendor was contacted early.
- Published: 02 Nov 2026 00:18 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: Exploit has been made available to the public
