CVE-2026-59764
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
ELECOM wireless LAN routers and access points contain an OS Command Injection vulnerability in the WebUI. An attacker who can log in to the device can exploit this to execute arbitrary OS commands.
Risk Assessment
An attacker with administrative access can gain full control over the device, potentially compromising network security and data.
Recommendation
Immediately update the firmware of affected ELECOM devices to the latest version that addresses this vulnerability.
Other vulnerabilities in ELECOM wireless LAN routers and access points
See all- CVE-2026-61376High
ELECOM wireless LAN routers and access points contain an OS Command Injection vulnerability in the Restore Settings function. An attacker who can log in to the device can exploit this to execute arbitrary OS commands.
- CVE-2026-44387Medium
ELECOM wireless LAN routers and access points are vulnerable to Reflected XSS in the WebUI. This could allow arbitrary script execution in a logged-in user's browser.
Original NVD description (English source)
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.