CVE-2026-42948 — ELECOM CO.,LTD. / WAB-BE187-M

CVE-2026-42948

ELECOM CO.,LTD. / WAB-BE187-M PUBLISHED

Description (CNA)

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.

Affected (CNA)

Vendor / product	Versions
ELECOM CO.,LTD. / WAB-BE187-M	affected v1.1.10 and earlier
ELECOM CO.,LTD. / WAB-BE72-M	affected v1.1.3 and earlier
ELECOM CO.,LTD. / WAB-BE36-M	affected v1.1.3 and earlier
ELECOM CO.,LTD. / WAB-BE36-S	affected v1.1.3 and earlier

CWE

CWE-79

References

https://www.elecom.co.jp/news/security/20260512-01/
https://jvn.jp/en/jp/JVN03037325/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.