Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)

CSIRTS triage

What

Multiple vulnerabilities exist in ELECOM wireless LAN routers and access points.

Who is affected

Users of ELECOM wireless LAN routers and access points.

Urgency

Remediation is necessary as these vulnerabilities could be exploited by attackers.

Action

Check for and apply firmware updates for the affected ELECOM devices.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

JVN (Japan Vulnerability Notes) (JP · national-cert · site)

Severity

unknown

Published

2026-07-28

Exploitation

Not in CISA KEV at last sync

Original advisory: https://jvn.jp/en/jp/JVN03037325/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-251070.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
• Moderate exploitation riskCVE-2026-355061.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 68% of all scored CVEs.
• Low exploitation riskCVE-2026-406210.49% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
• Moderate exploitation riskCVE-2026-420621.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 74% of all scored CVEs.
• Low exploitation riskCVE-2026-429480.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
• Low exploitation riskCVE-2026-429500.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all scored CVEs.
• Low exploitation riskCVE-2026-429610.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.

Referenced CVEs

Recent advisories for ELECOM wireless LAN

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• highCVE-2026-61376: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
• highCVE-2026-59764: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
• mediumCVE-2026-44387: ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting…nvd · 2026-07-28
• unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access pointsjvn · 2026-07-28
• unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)jvn · 2026-07-28

More from JVN (Japan Vulnerability Notes)

• unknownPermissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-2026-07-31
• unknownSharp Network Scanner Tool insecure initial configuration2026-07-31
• unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPs2026-07-31
• unknownMultiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App2026-07-31
• unknownCSV file injection vulnerability in BaserCMS2026-07-31