AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-11T15:17:08.357Z and has not been modified since then. WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-11T15:17:08.190Z and has not been modified since then. WAVLINK WN535M1 and WN535M3 routers with firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability. The sync_server daemon, running as root on TCP port 13136, accepts a 100-byte filename field without path can [truncated]
