CVE-2026-120198

{
  "etk_id": "ETK-2026-3211",
  "cve_id": "CVE-2026-120198",
  "display_id": "CVE-2026-120198",
  "ghsa_id": "GHSA-cq8m-m2p5-jxxm",
  "euvd_id": "EUVD-2026-114773",
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Command injection in WAVLINK WL-WN530BE1-A",
  "summary": "WAVLINK WL-WN530BE1-A devices running firmware V251117 are affected by a command-injection flaw in a protocol handling component. A remote attacker may be able to execute commands by sending crafted input to the affected interface; the evidence does not state an authentication requirement.",
  "mitigation": "Restrict network access to the device management and protocol interfaces to trusted administrative networks, and remove internet exposure. Monitor vendor support channels for updated firmware, as no fixed version is recorded.",
  "vendor": "WAVLINK",
  "product": "WL-WN530BE1-A",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "V251117"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "WL-WN530BE1-A",
      "purl": null
    }
  ],
  "cwes": [
    77
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 15.431884383333333,
  "t0_at": "2026-11-01T04:15:16.456000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-11-01T04:15:16.456000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-01T04:15:16.456000+00:00",
      "url": "https://github.com/pipiyyb/cve/blob/main/WN530BE1.md"
    },
    "trigger_signal": {
      "at": "2026-11-01T04:15:16.456000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-01T04:15:16.456000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-120198"
    }
  }
}