CVE-2026-32669

CRITICAL

BUFFALO Wi-Fi router - Code Injection

Title source: llm

Description

Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

References (2)

https://www.buffalo.jp/news/detail/20260323-01.html

https://jvn.jp/en/jp/JVN83788689/

Scores

CVSS v3 9.8

EPSS 0.0004

EPSS Percentile 13.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-94

Status published

Products (47)

buffalo/fs-m1266_firmware < 4.13

buffalo/fs-s1266_firmware < 4.13

buffalo/vr-u300w_firmware < 1.42

buffalo/vr-u500x_firmware < 1.42

buffalo/wapm-1266r_firmware < 1.42

buffalo/wapm-1266wdpra_firmware < 1.42

buffalo/wapm-1266wdpr_firmware < 1.42

buffalo/wapm-1750d_firmware < 1.07

buffalo/wapm-2133r_firmware < 1.42

buffalo/wapm-2133tr_firmware < 1.42

... and 37 more

Published Mar 27, 2026

Tracked Since Mar 27, 2026