[CVE-2026-59764] ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability …

Descripción técnica

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Puntuación CVSS

Score: 7.2/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-78

Fuente oficial

Publicado en NIST NVD.