← Database
CVE-2026-27650
CRITICAL
CVSS: 9.8
Published: 2026-03-27
Modified: 2026-06-17
Description
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
Affected Platforms
Buffalo Wzr-600Dhp FirmwareBuffalo Wzr-S900Dhp FirmwareBuffalo Wxr-1750Dhp2Buffalo Wzr-1750Dhp2 FirmwareBuffalo Wapm-1266RBuffalo Wxr18000Be10PBuffalo Waps-1266Buffalo Wzr-S900DhpBuffalo Wxr-5950Ax12 FirmwareBuffalo Vr-U300W