https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T12:32:36.654592+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-59764 fkie_cve-2026-59764 2026-09-30T12:32:36.738240+00:00

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

 https://vulnerability.circl.lu/vuln/ghsa-5rfp-gm74-mxcc GHSA-5rfp-gm74-mxcc 2026-09-30T12:32:36.738342+00:00

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000103 jvndb-2026-000103 2026-09-30T12:32:36.738377+00:00

Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><ul><li>Reflected cross-site scripting in WebUI (CWE-79) - CVE-2026-44387</li><li>OS command injection in WebUI (CWE-78) - CVE-2026-59764</li><li>OS command injection in Restore Settings (CWE-78) - CVE-2026-61376</li></ul>CVE-2026-44387 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-59764 Hirofumi Tanabe of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-61376 Rintaro Kawasugi reported this vulnerability to ELECOM CO.,LTD. and coordinated. After the coordination was completed, ELECOM CO.,LTD. reported the case to JPCERT/CC to notify users of the solution through JVN.