CVE-2026-8652 — NEC Platforms, Ltd. / Aterm MR51FN

CVE-2026-8652

NEC Platforms, Ltd. / Aterm MR51FN PUBLISHED

Description (CNA)

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.

Affected (CNA)

Vendor / product	Versions
NEC Platforms, Ltd. / Aterm MR51FN	affected Before Ver. 3.4.0
NEC Platforms, Ltd. / Aterm CM51FD	affected Before Ver. 1.2.0

CWE

CWE-78

References

https://jpn.nec.com/security-info/secinfo/nv26-003_en.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.