CVE-2026-42948mediumCWE-79

CVE-2026-42948: medium-severity vulnerability in ELECOM CO.,LTD. WAB-BE187-M

Published

Follow this CVE+ Monitor WAB-BE187-M+ Monitor WAB-BE36-M

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.2%
Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
ELECOM CO.,LTD. · WAB-BE187-MELECOM CO.,LTD. · WAB-BE36-MELECOM CO.,LTD. · WAB-BE36-SELECOM CO.,LTD. · WAB-BE72-M
Related CVEs — ELECOM CO.,LTD. WAB-BE187-M

In the same product, most dangerous first.

CVE-2026-42950MEDIUMCVE-2026-42950EPSS 0.2%CVE-2026-42961MEDIUMCVE-2026-42961EPSS 0.2%