NVD disclosure day
CVE-2026-120283
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Linksys routers allows remote attackers to cause a stack-based buffer overflow via crafted input to the web management interface. If reachable, this could lead to a denial of service or potentially unauthorized system control. Confirming the exposure and criticality of deployed devices is es
CVE-2026-120281
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in a WAVLINK router's OpenVPN handler, allowing remote attackers to cause a stack-based buffer overflow by manipulating the `openvpn_ip` argument. This could lead to a compromise of the device's integrity and availability.
CVE-2026-120280
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in WAVLINK networking devices allows remote attackers to inject OS commands by manipulating input to the WireGuard handler. This could lead to unauthorized command execution on the affected system. Understanding and assessing the exposure of these internet-facing devices is crucial.A vulnerability in WA
CVE-2026-120279
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A flaw in a WAVLINK networking device's OpenVPN handler allows remote command injection through argument manipulation. An unauthenticated attacker can execute operating system commands on the device, potentially impacting its functionality. The exploit has been published, increasing the risk of its use.
CVE-2026-120277
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability in a WAVLINK router's WireGuard CLI handler allows for remote OS command injection by manipulating a command argument. If reachable, this could enable an unauthenticated attacker to execute arbitrary commands on the device, potentially compromising its core functions and network traffic. Securi
CVE-2026-120276
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the WAVLINK router's web management interface allows remote attackers to execute operating system commands. This is possible by manipulating a specific argument in a web request, leading to OS command injection. Exploitation could impact the router's functionality and any services it manages.