https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 00:30:04 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-44387 <p>ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user&#39;s web browser.</p> <p>ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user&#39;s web browser.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-44387 https://vulnerability.circl.lu/vuln/ghsa-8p37-9vwg-qhv8 <p>ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user&#39;s web browser.</p> <p>ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user&#39;s web browser.</p> https://vulnerability.circl.lu/vuln/ghsa-8p37-9vwg-qhv8 https://vulnerability.circl.lu/vuln/jvndb-2026-000103 <p>Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Reflected cross-site scripting in WebUI (CWE-79) - CVE-2026-44387&lt;/li&gt;&lt;li&gt;OS command injection in WebUI (CWE-78) - CVE-2026-59764&lt;/li&gt;&lt;li&gt;OS command injection in Restore Settings (CWE-78) - CVE-2026-61376&lt;/li&gt;&lt;/ul&gt;CVE-2026-44387 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-59764 Hirofumi Tanabe of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-61376 Rintaro Kawasugi reported this vulnerability to ELECOM CO.,LTD. and coordinated. After the coordination was completed, ELECOM CO.,LTD. reported the case to JPCERT/CC to notify users of the solution through JVN.</p> <p>Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Reflected cross-site scripting in WebUI (CWE-79) - CVE-2026-44387&lt;/li&gt;&lt;li&gt;OS command injection in WebUI (CWE-78) - CVE-2026-59764&lt;/li&gt;&lt;li&gt;OS command injection in Restore Settings (CWE-78) - CVE-2026-61376&lt;/li&gt;&lt;/ul&gt;CVE-2026-44387 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-59764 Hirofumi Tanabe of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-61376 Rintaro Kawasugi reported this vulnerability to ELECOM CO.,LTD. and coordinated. After the coordination was completed, ELECOM CO.,LTD. reported the case to JPCERT/CC to notify users of the solution through JVN.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-000103