https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T06:33:59.545496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204267 EUVD-2026-204267 2026-10-13T06:33:59.624478+00:00 EUVD-2026-204267 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21798 fkie_cve-2024-21798 2026-10-13T06:33:59.624514+00:00

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".

 https://cve.radiocsirt.org/vuln/ghsa-gh95-m6w6-g25c GHSA-gh95-m6w6-g25c 2026-10-13T06:33:59.624550+00:00

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Affected products and versions are as follows: WRC-1167GS2-B v1.67 and earlier, WRC-1167GS2H-B v1.67 and earlier, WRC-2533GS2-B v1.62 and earlier, WRC-2533GS2-W v1.62 and earlier, and WRC-2533GS2V-B v1.62 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2024-21798 gsd-2024-21798 2026-10-13T06:33:59.624569+00:00 gsd-2024-21798 https://cve.radiocsirt.org/vuln/jvndb-2024-000020 jvndb-2024-000020 2026-10-13T06:33:59.624581+00:00

Multiple wireless LAN routers and wireless LAN repeater provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. <ul><li>Cross-site Scripting (CWE-79) - CVE-2024-21798</li> <li>Cross-Site Request Forgery (CWE-352) - CVE-2024-23910</li></ul> CVE-2024-21798 Yamaguchi Kakeru of Fujitsu Limited reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-23910 Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.