CVE-2026-32678

HIGH

Buffalo Inc. Buffalo Wi-fi Router Products - Authentication Bypass

Title source: rule

Description

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

References (2)

https://www.buffalo.jp/news/detail/20260323-01.html

https://jvn.jp/en/jp/JVN83788689/

Scores

CVSS v3 7.5

EPSS 0.0010

EPSS Percentile 27.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-288

Status published

Products (47)

buffalo/fs-m1266_firmware < 4.13

buffalo/fs-s1266_firmware < 4.13

buffalo/vr-u300w_firmware < 1.42

buffalo/vr-u500x_firmware < 1.42

buffalo/wapm-1266r_firmware < 1.42

buffalo/wapm-1266wdpr_firmware < 1.42

buffalo/wapm-1266wdpra_firmware < 1.42

buffalo/wapm-1750d_firmware < 1.07

buffalo/wapm-2133r_firmware < 1.42

buffalo/wapm-2133tr_firmware < 1.42

... and 37 more

Published Mar 27, 2026

Tracked Since Mar 27, 2026