Known vulnerabilities in WEM-1266

Vendor: BUFFALO INC.
Software: WEM-1266
Software CPE: cpe:2.3:h:buffalo:wem-1266:*:*:*:*:*:*:*:*
Website: https://www.buffalo.jp/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WEM-1266 WEM-1266 is affected by 7 known vulnerabilities: 2 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124657 - Missing Authentication for Critical Function
CVE-2026-33366		 CWE-306 Medium
No
No
 2.87 27.03.2026 SB2026032735
SB2026032738
#VU124656 - Hidden Functionality (Backdoor)
CVE-2026-33280		 CWE-912 Low
No
No
 2.87 27.03.2026 SB2026032735
SB2026032738
#VU124655 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-32678		 CWE-288 Low
No
No
 2.87 27.03.2026 SB2026032735
SB2026032738
#VU124654 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-32669		 CWE-94 High
No
No
 2.87 27.03.2026 SB2026032735
SB2026032738
#VU124653 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-27650		 CWE-78 High
No
No
 2.87 27.03.2026 SB2026032735
SB2026032738
#VU67888 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-40966		 CWE-288 Medium
No
No
 2.86 04.10.2022 SB2022100410
#VU58 - Improper Neutralization of Alternate XSS Syntax
CVE-2015-1548		 CWE-119 Low
No
No
 2.87 29.06.2016 SB2015012401
SB2016071407
SB2026032735
and 1 more