https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:06:53.922476+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231509 EUVD-2026-231509 2026-10-15T20:06:54.001522+00:00 EUVD-2026-231509 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43466 fkie_cve-2022-43466 2026-10-15T20:06:54.001565+00:00

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

 https://cve.radiocsirt.org/vuln/ghsa-vqc2-jf89-w6m6 GHSA-vqc2-jf89-w6m6 2026-10-15T20:06:54.001601+00:00

Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1.25, WSR-2533DHP2 firmware Ver. 1.22 and earlier, WSR-A2533DHP2 firmware Ver. 1.22 and earlier, WSR-2533DHP3 firmware Ver. 1.26 and earlier, WSR-A2533DHP3 firmware Ver. 1.26 and earlier, WSR-2533DHPL2 firmware Ver. 1.03 and earlier, WSR-2533DHPLS firmware Ver. 1.07 and earlier, WEX-1800AX4 firmware Ver. 1.13 and earlier, and WEX-1800AX4EA firmware Ver. 1.13 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

 https://cve.radiocsirt.org/vuln/gsd-2022-43466 gsd-2022-43466 2026-10-15T20:06:54.001622+00:00 gsd-2022-43466 https://cve.radiocsirt.org/vuln/jvndb-2022-002775 jvndb-2022-002775 2026-10-15T20:06:54.001633+00:00

Multiple network devices provided by BUFFALO INC. contain multiple vulnerabilities listed below. * OS Command Injection (CWE-78) - CVE-2022-43466 * OS Command Injection (CWE-78) - CVE-2022-43443 * Hidden Functionality (CWE-912) - CVE-2022-43486 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.