48/100
WAVLINK WN536AX6-A V260507 has remote OS command injection through group_id/group_name in the wireguard_cli_group handler at /protocol.csp. An exploit is public; authentication requirements, deployment prerequisites and fixed versions need checking in the supplier advisory.