NEC Platforms, Ltd Aterm WX3000HP2

• CVE-2026-6059 Medium 4.8 A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network. 0.2%
• CVE-2026-4622 High 7.1 OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network. 0.9%
• CVE-2026-4621 Medium 6.3 Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network. 0.2%