ELECOM CO.,LTD. WAB-BE36-M

• CVE-2026-42961 Medium 4.3 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to 0.2%
• CVE-2026-42950 Medium 4.3 ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may bec 0.2%
• CVE-2026-42948 Medium 4.8 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administ 0.2%