CVE-2026-120281

Description

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

CWE

• CWE-121
• CWE-119

Affected

WAVLINK WN536AX6-A

References

• https://vuldb.com/vuln/429625vdb-entry, technical-description
• https://vuldb.com/vuln/429625/ctisignature, permissions-required
• https://vuldb.com/cve/CVE-2026-120281third-party-advisory
• https://vuldb.com/submit/919790third-party-advisory
• https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.mdexploit