{"metadata": {"vulnerability": "CVE-2026-113802", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-113802", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T17:41:48.268Z", "date_only": false, "value": "2026-10-20T17:41:48.268Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-113802", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T17:59:55.407Z", "date_only": false, "value": "2026-10-20T17:59:55.407Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113802", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T17:59:55.407Z", "date_only": false, "value": "2026-10-20T17:59:55.407Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-113802", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T18:05:46.166Z", "date_only": false, "value": "2026-10-20T18:05:46.166840Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117474560940246780", "record": "CVE-2026-113802", "field": "creation_timestamp", "uuid": "b78025aa-523b-4e20-9e4f-95f53ccca036", "content": "CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.\nhttps://www.cve.org/CVERecord?id=CVE-2026-113802https://github.com/F-yyjy/cve/blob/main/WN530BE1(en).mdhttps://www.vulncheck.com/advisories/wavlink-wl-wn530be1-a-unauthenticated-os-command-injection-in-ioos-protocol-csp-ovpn-file-handler#Wavlink #WL-WN530BE1-A#CVE_2026_113802#bot", "url": "https://infosec.exchange/users/cve/statuses/117474560940246780"}, {"timestamp": "2026-10-20T18:17:21Z", "date_only": false, "value": "2026-10-20T18:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J6FH-9747-5RV9", "record": "GHSA-J6FH-9747-5RV9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T18:17:21.430Z", "date_only": false, "value": "2026-10-20T18:17:21.430", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113802", "record": "FKIE_CVE-2026-113802", "field": "published"}, {"timestamp": "2026-10-20T18:31:49Z", "date_only": false, "value": "2026-10-20T18:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J6FH-9747-5RV9", "record": "GHSA-J6FH-9747-5RV9", "field": "published"}, {"timestamp": "2026-10-20T18:31:49Z", "date_only": false, "value": "2026-10-20T18:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J6FH-9747-5RV9", "record": "GHSA-J6FH-9747-5RV9", "field": "modified"}, {"timestamp": "2026-10-21T14:42:19.200Z", "date_only": false, "value": "2026-10-21T14:42:19.200072Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113802", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-21T14:42:19.200Z", "date_only": false, "value": "2026-10-21T14:42:19.200072Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113802", "record": "FKIE_CVE-2026-113802", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-21T15:53:04.180Z", "date_only": false, "value": "2026-10-21T15:53:04.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-113802", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T15:53:04.180Z", "date_only": false, "value": "2026-10-21T15:53:04.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113802", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T16:17:28.990Z", "date_only": false, "value": "2026-10-21T16:17:28.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113802", "record": "FKIE_CVE-2026-113802", "field": "lastModified"}]}