CVE-2026-42062 — ELECOM CO.,LTD. / WRC-BE72XSD-B

CVE-2026-42062

ELECOM CO.,LTD. / WRC-BE72XSD-B PUBLISHED

Description (CNA)

ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.

Affected (CNA)

Vendor / product	Versions
ELECOM CO.,LTD. / WRC-BE72XSD-B	affected v1.1.1 and earlier
ELECOM CO.,LTD. / WRC-BE72XSD-BA	affected v1.1.1 and earlier
ELECOM CO.,LTD. / WRC-BE65QSD-B	affected v1.1.0 and earlier
ELECOM CO.,LTD. / WRC-W702-B	affected v1.1.0 and earlier

CWE

CWE-78

References

https://www.elecom.co.jp/news/security/20260512-01/
https://jvn.jp/en/jp/JVN03037325/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.