https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 12:31:07 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-86530 <p>BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.</p> <p>BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-86530 https://vulnerability.circl.lu/vuln/ghsa-j628-7w6r-937x <p>BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.</p> <p>BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.</p> https://vulnerability.circl.lu/vuln/ghsa-j628-7w6r-937x https://vulnerability.circl.lu/vuln/jvndb-2026-035794 <p>The web configuration user interfaces of Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/121.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-86530&lt;/li&gt;&lt;li&gt;Stack-based buffer overflow (CWE-121) - CVE-2026-95104&lt;/li&gt;&lt;/ul&gt;Veeti Punnonen reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> <p>The web configuration user interfaces of Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/121.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-86530&lt;/li&gt;&lt;li&gt;Stack-based buffer overflow (CWE-121) - CVE-2026-95104&lt;/li&gt;&lt;/ul&gt;Veeti Punnonen reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-035794