EELECOM CO.,LTD.

Products

Exploited and recent CVEs

• CVE-2026-61376 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by 1.7%
• CVE-2026-61376 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by 1.7%
• CVE-2026-61376 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by 1.7%
• CVE-2026-61376 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by 1.7%
• CVE-2026-61376 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by 1.7%
• CVE-2026-59764 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker 1.7%
• CVE-2026-59764 High 7.2 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker 1.7%
• CVE-2026-44387 Medium 5.2 ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logg 0.2%
• CVE-2026-44387 Medium 5.2 ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logg 0.2%
• CVE-2026-44387 Medium 5.2 ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logg 0.2%
• CVE-2026-44387 Medium 5.2 ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logg 0.2%
• CVE-2026-44387 Medium 5.2 ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logg 0.2%
• CVE-2026-42961 Medium 4.3 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to 0.2%
• CVE-2026-42961 Medium 4.3 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to 0.2%
• CVE-2026-42961 Medium 4.3 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to 0.2%
• CVE-2026-42961 Medium 4.3 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to 0.2%
• CVE-2026-42950 Medium 4.3 ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may bec 0.2%
• CVE-2026-42950 Medium 4.3 ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may bec 0.2%
• CVE-2026-42950 Medium 4.3 ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may bec 0.2%
• CVE-2026-42950 Medium 4.3 ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may bec 0.2%
• CVE-2026-42948 Medium 4.8 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administ 0.2%
• CVE-2026-42948 Medium 4.8 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administ 0.2%
• CVE-2026-42948 Medium 4.8 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administ 0.2%
• CVE-2026-42948 Medium 4.8 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administ 0.2%
• CVE-2026-42062 Critical 9.8 ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authenticatio 1.6%
• CVE-2026-42062 Critical 9.8 ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authenticatio 1.6%
• CVE-2026-42062 Critical 9.8 ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authenticatio 1.6%
• CVE-2026-42062 Critical 9.8 ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authenticatio 1.6%
• CVE-2026-40621 Critical 9.8 ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication. 0.5%
• CVE-2026-40621 Critical 9.8 ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication. 0.5%