CVE-2026-120278 in WN536AX6-Ainfo

Prediction

by VulDB Data Team • 11/01/2026

A vulnerability was detected in <a href="/product/wavlink:wn536ax6-a">WAVLINK WN536AX6-A V260507_2.0.0</a>. Impacted is the function <code>sub_416d48/sub_41a7c0</code> of the file <em>/bin/ioos</em> of the component <em>VPN Client List Handler</em>. Performing a manipulation of the argument <em>opt</em> results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

VulDB

Moderation

accepted

CPE

VulDB

Exploit

Download

EPSS

0.00000

KEV

no

Activities

low

Sources

Interested in the pricing of exploits?

See the underground prices here!