Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-35506

ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.

CVSS 4.0 · 8.6 High EPSS 1.3% KEV · Not listed
Vendors
Elecom
Products
Wrc-be65qsd-b Wrc-be72xsd-b Wrc-be72xsd-ba and 1 more
CVE-2026-42062

ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.

CVSS 4.0 · 9.3 Critical EPSS 1.6% KEV · Not listed
Vendors
Elecom
Products
Wrc-be65qsd-b Wrc-be72xsd-b Wrc-be72xsd-ba and 1 more