Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.
Search vulnerabilities
CVE-2026-33366
CVSS 4.0 · 6.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-27650
OS Command Injection in Buffalo Wi‑Fi Router Firmware
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
CVSS 4.0 · 8.6 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-32669
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-32678
Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-33280
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
CVSS 4.0 · 8.6 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.