CVE-2026-120345 WAVLINK CVE debrief

Who should care

Defenders responsible for remote systems using WAVLINK WN551X3-A M51X3_V251020-WO-182e965 should assess exposure and implement compensating controls. Network administrators and security teams should prioritize verification of DNS Resolution Handler configurations and monitor for potential exploitation attempts.

Why it matters

CVE-2026-120345 is a critical os command injection vulnerability in WAVLINK WN551X3-A M51X3_V251020-WO-182e965 that can be exploited remotely. Defenders should assess exposure, verify configurations, and implement compensating controls. Remediation priority is high due to public exploit availability, but details on affected versions and remediation are limited.

• Remote code execution requires verification
• Potential for command injection attacks
• Exposure of WAVLINK WN551X3-A systems to the internet may increase risk
• Remediation priority is high due to public exploit availability

Technical summary

The WAVLINK WN551X3-A M51X3_V251020-WO-182e965 device is vulnerable to os command injection in the DNS Resolution Handler component. The vulnerability is triggered by manipulating the argument data in the sub_41a430 function of the /bin/ioos file. This can be exploited remotely, and a public exploit has been made available. The vulnerability has a CVSS score of 9.3 and is considered CRITICAL. The vendor was contacted early about this disclosure, but details on affected versions and remediation are limited. The CVE record and NVD detail page provide information on the vulnerability.

Defensive priority

High priority for remote systems using WAVLINK WN551X3-A M51X3_V251020-WO-182e965

Recommended defensive actions

• Assess exposure of WAVLINK WN551X3-A M51X3_V251020-WO-182e965 systems to the internet
• Verify DNS Resolution Handler component configurations
• Implement compensating controls for remote access
• Monitor for potential exploitation attempts
• Review vendor guidance for remediation
• Perform asset inventory of potentially affected systems
• Track remediation progress and verify effectiveness

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, including its CVSS score of 9.3 and severity of CRITICAL. However, details on affected versions, exploitation, and remediation are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.