Multiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)
Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
CSIRTS triage
- What
- Multiple vulnerabilities exist in ELECOM wireless LAN routers and access points.
- Who is affected
- Users of ELECOM wireless LAN routers and access points.
- Urgency
- Remediation is necessary as these vulnerabilities could be exploited by attackers.
- Action
- Check for and apply firmware updates for the affected ELECOM devices.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Wireless LAN routers and access points
Get an email when a new Wireless LAN routers and access points advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://jvn.jp/en/jp/JVN56870912/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-443870.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Moderate exploitation riskCVE-2026-613761.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 63% of all scored CVEs.
- Moderate exploitation riskCVE-2026-597641.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 63% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-44387 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-61376 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59764 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highCVE-2026-61376: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd
- highCVE-2026-59764: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd
- mediumCVE-2026-44387: ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting…nvd
Recent advisories for ELECOM wireless LAN
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-61376: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
- highCVE-2026-59764: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
- mediumCVE-2026-44387: ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting…nvd · 2026-07-28
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)jvn · 2026-07-28
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access pointsjvn · 2026-07-28
More from JVN (Japan Vulnerability Notes)
- unknownPermissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-2026-07-31
- unknownSharp Network Scanner Tool insecure initial configuration2026-07-31
- unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPs2026-07-31
- unknownMultiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App2026-07-31
- unknownCSV file injection vulnerability in BaserCMS2026-07-31