BUFFALO INC. WEX-G300

• CVE-2026-95104 High 7.5 Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition. 0.4%
• CVE-2026-86530 High 7.2 BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command. 0.4%