Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-40621 EUVD-2026-29940GHSA-9v2f-mjhv-cgq5

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated w…

Published May 13, 2026 · Updated May 13, 2026 · Assigned by jpcert

Description

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication.

Affected products

VendorProductAffectedFixed
ELECOM WRC-BE72XSD-B v1.1.1 and earlier —
ELECOM WRC-BE72XSD-BA v1.1.1 and earlier —
ELECOM WRC-BE65QSD-B v1.1.0 and earlier —
ELECOM WRC-W702-B v1.1.0 and earlier —

References