Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-42950 EUVD-2026-29943GHSA-3f7h-8wg4-948w

ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page whil…

Published May 13, 2026 · Updated May 13, 2026 · Assigned by jpcert

Description

ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may become broken.

Affected products

VendorProductAffectedFixed
ELECOM WAB-BE187-M v1.1.10 and earlier —
ELECOM WAB-BE72-M v1.1.3 and earlier —
ELECOM WAB-BE36-M v1.1.3 and earlier —
ELECOM WAB-BE36-S v1.1.3 and earlier —

References