CVE-2026-6059 — NEC Platforms, Ltd. / Aterm WX1800HP

Description (CNA)

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.

Affected (CNA)

Vendor / product	Versions
NEC Platforms, Ltd. / Aterm WX1800HP	affected Before Ver. 3.2.2
NEC Platforms, Ltd. / Aterm WX5400HP	affected Before Ver. 2.1.0
NEC Platforms, Ltd. / Aterm WX7800T8	affected Before Ver. 1.5.1
NEC Platforms, Ltd. / Aterm WX11000T12	affected Before Ver. 1.4.0
NEC Platforms, Ltd. / Aterm WX3000HP2	affected Before Ver. 1.3.2
NEC Platforms, Ltd. / Aterm WX4200D5	affected Before Ver. 1.3.5
NEC Platforms, Ltd. / Aterm GX621A1	affected Before Ver. 3.2.2
NEC Platforms, Ltd. / Aterm SH621A1	affected Before Ver. 3.2.2
NEC Platforms, Ltd. / Aterm 19000T12BE	affected Before Ver. 1.1.0

CWE

CWE-79

References

https://jpn.nec.com/security-info/secinfo/nv26-002_en.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.