Summary
generated automatically from NVD dataCVE-2026-120281 affects the WAVLINK WN536AX6-A V260507, specifically the OpenVPN Handler component in /protocol.csp. A strcpy call processes the openvpn_ip argument unsafely, causing a stack-based buffer overflow (CWE-119) that can be triggered remotely. The NVD notes that a public exploit exists, and the flaw is rated CRITICAL with a CVSS v3.1 score of 10.0.
NVD description
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
In-depth analysis on cveo.tech
This CVE is covered in an article: context, affected versions and published fixes.
CVSS v3.1 Score
Information
- Published
- 2 nov. 2026
- Updated
- 2 nov. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.