CVE-2026-44387

MEDIUM

Elecom Co.,ltd. WAB-M1775-PS - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Title source: rule

Description

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

References (2)

Core 2

Core References

https://www.elecom.co.jp/news/security/20260728-01/

https://jvn.jp/en/jp/JVN56870912/

Scores

CVSS v3 5.2

EPSS 0.0015

EPSS Percentile 4.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (5)

ELECOM CO.,LTD./WAB-I1750-PS < v2.0.5

ELECOM CO.,LTD./WAB-M1775-PS < v2.1.9

ELECOM CO.,LTD./WAB-M2133 < v2.0.5

ELECOM CO.,LTD./WAB-S1167-PS < v2.0.5

ELECOM CO.,LTD./WAB-S1775 < v2.1.9

Published Jul 28, 2026

Tracked Since Jul 28, 2026