OS Command Injection in BUFFALO INC. products - CVE-2026-27650

Vulnerability identifier: #VU124653

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-27650

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

WCR-1166DHPL
WAPM-1750D
WAPM-AX4R
WAPM-2133R
WAPM-1266WDPRA
WAPM-1266WDPR
WAPM-1266R
VR-U500X
VR-U300W
WAPM-2133TR
WAPM-AX8R
WAPM-AXETR
WAPS-1266
WAPS-AX4
WZR-1166DHP2
WZR-1166DHP
WZR-1750DHP
WZR-1750DHP2
WZR-S1750DHP
WXR-1900DHP
WXR-1900DHP2
WXR-1750DHP
WXR-1750DHP2
WXR-1900DHP3
WEM-1266WP
WEM-1266
WRM-D2133HP
WRM-D2133HS
WTR-M2133HP
WTR-M2133HS
WXR-6000AX12P
WXR-5950AX12
WXR-6000AX12S
WXR-6000AX12B
FS-S1266
FS-M1266
WSR3600BE4P
WXR18000BE10P
WSR3600BE4-KH
WZR-600DHP
WZR-600DHP2
WZR-600DHP3
WZR-900DHP
WZR-900DHP2
WZR-S600DHP
WZR-S900DHP

Install updates from vendor's website.

WCR-1166DHPL - update to 1.01
WAPM-1750D - update to 1.07
WAPM-AX4R - update to 1.42
WAPM-2133R - update to 1.42
WAPM-1266WDPRA - update to 1.42
WAPM-1266WDPR - update to 1.42
WAPM-1266R - update to 1.42
VR-U500X - update to 1.42
VR-U300W - update to 1.42
WAPM-2133TR - update to 1.42
WAPM-AX8R - update to 1.42
WAPM-AXETR - update to 1.42
WAPS-1266 - update to 1.42
WAPS-AX4 - update to 1.42
WZR-1166DHP2 - update to 2.20
WZR-1166DHP - update to 2.20
WZR-1750DHP - update to 2.32
WZR-1750DHP2 - update to 2.33
WZR-S1750DHP - update to 2.34
WXR-1900DHP - update to 2.53
WXR-1900DHP2 - update to 2.62
WXR-1750DHP - update to 2.63
WXR-1750DHP2 - update to 2.63
WXR-1900DHP3 - update to 2.66
WEM-1266WP - update to 2.87
WEM-1266 - update to 2.87
WRM-D2133HP - update to 3.01
WRM-D2133HS - update to 3.01
WTR-M2133HP - update to 3.01
WTR-M2133HS - update to 3.01
WXR-6000AX12P - update to 3.57
WXR-5950AX12 - update to 3.57
WXR-6000AX12S - update to 3.57
WXR-6000AX12B - update to 3.57
FS-S1266 - update to 4.13
FS-M1266 - update to 4.13
WSR3600BE4P - update to 5.02
WXR18000BE10P - update to 5.03
WSR3600BE4-KH - update to 6.02

• https://jvn.jp/en/jp/JVN83788689/index.html
• https://www.buffalo.jp/news/detail/20260323-01.html

• Multiple vulnerabilities in BUFFALO Wi-Fi routers
• Multiple vulnerabilities in BUFFALO Wi-Fi routers