Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-6059 EUVD-2026-31623GHSA-g9r3-rg2f-3r96

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web mana…

Published May 25, 2026 · Updated May 26, 2026 · Assigned by NEC

Vendor: NEC Platforms Product: Aterm 19000T12BE Product: Aterm GX621A1 Product: Aterm SH621A1 Product: Aterm WX11000T12 Product: Aterm WX1800HP Product: Aterm WX3000HP2 Product: Aterm WX4200D5 Product: Aterm WX5400HP Product: Aterm WX7800T8

Description

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.

Affected products

VendorProductAffectedFixed
NEC Platforms Aterm WX1800HP Before Ver. 3.2.2 —
NEC Platforms Aterm WX5400HP Before Ver. 2.1.0 —
NEC Platforms Aterm WX7800T8 Before Ver. 1.5.1 —
NEC Platforms Aterm WX11000T12 Before Ver. 1.4.0 —
NEC Platforms Aterm WX3000HP2 Before Ver. 1.3.2 —
NEC Platforms Aterm WX4200D5 Before Ver. 1.3.5 —
NEC Platforms Aterm GX621A1 Before Ver. 3.2.2 —
NEC Platforms Aterm SH621A1 Before Ver. 3.2.2 —
NEC Platforms Aterm 19000T12BE Before Ver. 1.1.0 —

References