CVE-2026-120281 | CVSS: 10 | 严重级别: CRITICAL
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
参考链接:
• https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md
• https://vuldb.com/cve/CVE-2026-120281
• https://vuldb.com/submit/919790
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。