Back to CVE records
Critical 9.8Published Mar 27, 2026
CVE-2026-33280Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS com…
Updated under an hour ago ()
Does this affect you?
It affects buffalo wcr-1166dhpl_firmware and 45 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- CVSS
- 9.8 CRITICAL (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-912
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Jun 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
buffalo wcr-1166dhpl_firmware buffalo:wcr-1166dhpl_firmware | before 1.01 | NVD |
buffalo wsr3600be4-kh_firmware buffalo:wsr3600be4-kh_firmware | before 6.02 | NVD |
buffalo wsr3600be4p_firmware buffalo:wsr3600be4p_firmware | before 5.02 | NVD |
buffalo wxr-1750dhp_firmware buffalo:wxr-1750dhp_firmware | before 2.63 | NVD |
buffalo wxr-1750dhp2_firmware buffalo:wxr-1750dhp2_firmware | before 2.63 | NVD |
buffalo wxr18000be10p_firmware buffalo:wxr18000be10p_firmware | before 5.03 | NVD |
buffalo wxr-1900dhp_firmware buffalo:wxr-1900dhp_firmware | before 2.53 | NVD |
buffalo wxr-1900dhp2_firmware buffalo:wxr-1900dhp2_firmware | before 2.62 | NVD |
buffalo wxr-1900dhp3_firmware buffalo:wxr-1900dhp3_firmware | before 2.66 | NVD |
buffalo wxr-5950ax12_firmware buffalo:wxr-5950ax12_firmware | before 3.57 | NVD |
buffalo wxr-6000ax12b_firmware buffalo:wxr-6000ax12b_firmware | before 3.57 | NVD |
buffalo wxr-6000ax12p_firmware buffalo:wxr-6000ax12p_firmware | before 3.57 | NVD |
buffalo wxr-6000ax12s_firmware buffalo:wxr-6000ax12s_firmware | before 3.57 | NVD |
buffalo wzr-1166dhp_firmware buffalo:wzr-1166dhp_firmware | before 2.20 | NVD |
buffalo wzr-1166dhp2_firmware buffalo:wzr-1166dhp2_firmware | before 2.20 | NVD |
buffalo wzr-1750dhp_firmware buffalo:wzr-1750dhp_firmware | before 2.32 | NVD |
buffalo wzr-1750dhp2_firmware buffalo:wzr-1750dhp2_firmware | before 2.33 | NVD |
buffalo wzr-s1750dhp_firmware buffalo:wzr-s1750dhp_firmware | before 2.34 | NVD |
buffalo wrm-d2133hp_firmware buffalo:wrm-d2133hp_firmware | before 3.01 | NVD |
buffalo wrm-d2133hs_firmware buffalo:wrm-d2133hs_firmware | before 3.01 | NVD |
buffalo wtr-m2133hp_firmware buffalo:wtr-m2133hp_firmware | before 3.01 | NVD |
buffalo wtr-m2133hs_firmware buffalo:wtr-m2133hs_firmware | before 3.01 | NVD |
buffalo wem-1266_firmware buffalo:wem-1266_firmware | before 2.87 | NVD |
buffalo wem-1266wp_firmware buffalo:wem-1266wp_firmware | before 2.87 | NVD |
buffalo vr-u300w_firmware buffalo:vr-u300w_firmware | before 1.42 | NVD |
buffalo vr-u500x_firmware buffalo:vr-u500x_firmware | before 1.42 | NVD |
buffalo wapm-1266r_firmware buffalo:wapm-1266r_firmware | before 1.42 | NVD |
buffalo wapm-1266wdpr_firmware buffalo:wapm-1266wdpr_firmware | before 1.42 | NVD |
buffalo wapm-1266wdpra_firmware buffalo:wapm-1266wdpra_firmware | before 1.42 | NVD |
buffalo wapm-1750d_firmware buffalo:wapm-1750d_firmware | before 1.07 | NVD |
buffalo wapm-2133r_firmware buffalo:wapm-2133r_firmware | before 1.42 | NVD |
buffalo wapm-2133tr_firmware buffalo:wapm-2133tr_firmware | before 1.42 | NVD |
buffalo wapm-ax4r_firmware buffalo:wapm-ax4r_firmware | before 1.42 | NVD |
buffalo wapm-ax8r_firmware buffalo:wapm-ax8r_firmware | before 1.42 | NVD |
buffalo wapm-axetr_firmware buffalo:wapm-axetr_firmware | before 1.42 | NVD |
buffalo waps-1266_firmware buffalo:waps-1266_firmware | before 1.42 | NVD |
buffalo waps-ax4_firmware buffalo:waps-ax4_firmware | before 1.42 | NVD |
buffalo fs-m1266_firmware buffalo:fs-m1266_firmware | before 4.13 | NVD |
buffalo fs-s1266_firmware buffalo:fs-s1266_firmware | before 4.13 | NVD |
buffalo wzr-600dhp_firmware buffalo:wzr-600dhp_firmware | all versions | NVD |
buffalo wzr-600dhp2_firmware buffalo:wzr-600dhp2_firmware | all versions | NVD |
buffalo wzr-600dhp3_firmware buffalo:wzr-600dhp3_firmware | all versions | NVD |
buffalo wzr-900dhp_firmware buffalo:wzr-900dhp_firmware | all versions | NVD |
buffalo wzr-900dhp2_firmware buffalo:wzr-900dhp2_firmware | all versions | NVD |
buffalo wzr-s600dhp_firmware buffalo:wzr-s600dhp_firmware | all versions | NVD |
buffalo wzr-s900dhp_firmware buffalo:wzr-s900dhp_firmware | all versions | NVD |
References
- https://jvn.jp/en/jp/JVN83788689/third-party-advisory
- https://www.buffalo.jp/news/detail/20260323-01.htmlvendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.