Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-42948

Stored XSS Vulnerability in ELECOM Wireless Access Point Administration Interface

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Elecom
Products
Wab-be187-m Wab-be36-m Wab-be36-s and 1 more
CVE-2026-42950

Elecom Wireless LAN Access Point Language Parameter Validation Failure Causing Admin Page Breakage

ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may become broken.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Elecom
Products
Wab-be187-m Wab-be36-m Wab-be36-s and 1 more
CVE-2026-42961

Improper CSRF Token Handling in ELECOM Wireless LAN Access Point Firmware

ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Elecom
Products
Wab-be187-m Wab-be36-m Wab-be36-s and 1 more