https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T00:30:05.398178+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-44387 fkie_cve-2026-44387 2026-09-30T00:30:05.400510+00:00

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

 https://vulnerability.circl.lu/vuln/ghsa-8p37-9vwg-qhv8 GHSA-8p37-9vwg-qhv8 2026-09-30T00:30:05.400599+00:00

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000103 jvndb-2026-000103 2026-09-30T00:30:05.400626+00:00

Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><ul><li>Reflected cross-site scripting in WebUI (CWE-79) - CVE-2026-44387</li><li>OS command injection in WebUI (CWE-78) - CVE-2026-59764</li><li>OS command injection in Restore Settings (CWE-78) - CVE-2026-61376</li></ul>CVE-2026-44387 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-59764 Hirofumi Tanabe of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-61376 Rintaro Kawasugi reported this vulnerability to ELECOM CO.,LTD. and coordinated. After the coordination was completed, ELECOM CO.,LTD. reported the case to JPCERT/CC to notify users of the solution through JVN.