CVE-2026-113802 - Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler
CVE ID :CVE-2026-113802 Published : Oct. 20, 2026, 6:17 p.m. | 1 hour, 49 minutes ago Description :Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter...