Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-20704 EUVD-2026-5269GHSA-j4m8-34qw-2393

Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the…

Published Feb 3, 2026 · Updated May 12, 2026 · Assigned by jpcert

Description

Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed.

Affected products

VendorProductAffectedFixed
ELECOM WRC-X1500GS-B v1.12 and earlier —
ELECOM WRC-X1500GSA-B v1.12 and earlier —
ELECOM WRC-X3000GS2-B v1.09 and earlier —
ELECOM WRC-X3000GS2-W v1.09 and earlier —
ELECOM WRC-X3000GS2A-B v1.09 and earlier —
ELECOM WRC-X3000GST2-B v1.06 and earlier —
ELECOM WRC-X1800GS-B v1.19 and earlier —
ELECOM WRC-X1800GSA-B v1.19 and earlier —
ELECOM WRC-X1800GSH-B v1.19 and earlier —
ELECOM WRC-X6000QS-G v1.14 and earlier —
ELECOM WRC-X6000QSA-G v1.14 and earlier —
ELECOM WRC-X6000XS-G v1.12 and earlier —
ELECOM WRC-X6000XST-G v1.16 and earlier —
ELECOM WRC-XE5400GS-G v1.13 and earlier —
ELECOM WRC-XE5400GSA-G v1.13 and earlier —

References