Skip to content
OpenAdvisories
Medium · 5.2 CVE-2026-44387 EUVD-2026-49724GHSA-8p37-9vwg-qhv8

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerabilit…

Published Jul 28, 2026 · Updated Jul 28, 2026 · Assigned by jpcert

Description

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

VendorProductAffectedFixed
ELECOM WAB-M1775-PS ≤ v2.1.9 —
ELECOM WAB-S1775 ≤ v2.1.9 —
ELECOM WAB-M2133 ≤ v2.0.5 —
ELECOM WAB-I1750-PS ≤ v2.0.5 —
ELECOM WAB-S1167-PS ≤ v2.0.5 —

References