CVE-2026-86530 — BUFFALO INC. / WSR-300HP

CVE-2026-86530

BUFFALO INC. / WSR-300HP PUBLISHED

Description (CNA)

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.

Affected (CNA)

Vendor / product	Versions
BUFFALO INC. / WSR-300HP	affected 0 before Ver.2.55
BUFFALO INC. / WEX-G300	affected 0 before Ver.1.71

CWE

CWE-78

References

https://www.buffalo.jp/news/detail/20260928-01.html
https://jvn.jp/en/vu/JVNVU94863997/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.