https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:00:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277870 EUVD-2026-277870 https://cve.radiocsirt.org/vuln/euvd-2026-277870 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33280 <p>Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.</p> <p>Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33280 https://cve.radiocsirt.org/vuln/ghsa-3vp9-wjw8-vgmx <p>Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.</p> <p>Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.</p> https://cve.radiocsirt.org/vuln/ghsa-3vp9-wjw8-vgmx https://cve.radiocsirt.org/vuln/jvndb-2026-000046 <p>Wi-Fi router products provided by BUFFALO INC. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/1395.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/94.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/288.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://cwe.mitre.org/data/definitions/912.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395) - This issue is caused by a vulnerability in mini_httpd (CVE-2015-1548).&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-27650&lt;/li&gt;&lt;li&gt;Code injection (CWE-94) - CVE-2026-32669&lt;/li&gt;&lt;li&gt;Authentication bypass using an alternate path or channel (CWE-288) - CVE-2026-32678&lt;/li&gt;&lt;li&gt;Hidden functionality (CWE-912) - CVE-2026-33280&lt;/li&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-33366&lt;/li&gt;&lt;/ul&gt;CVE-2015-1548 Justus W. Perlwitz of JWP Consulting reported this vulnerability to BUFFALO INC. and coordinated. After the coordination was completed, BUFFALO INC. reported the case to JPCERT/CC to notify users of the solution through JVN. CVE-2026-27650 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-…</p> <p>Wi-Fi router products provided by BUFFALO INC. contain multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/1395.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/94.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/288.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://cwe.mitre.org/data/definitions/912.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Dependency on vulnerable third-party component (CWE-1395) - This issue is caused by a vulnerability in mini_httpd (CVE-2015-1548).&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-27650&lt;/li&gt;&lt;li&gt;Code injection (CWE-94) - CVE-2026-32669&lt;/li&gt;&lt;li&gt;Authentication bypass using an alternate path or channel (CWE-288) - CVE-2026-32678&lt;/li&gt;&lt;li&gt;Hidden functionality (CWE-912) - CVE-2026-33280&lt;/li&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-33366&lt;/li&gt;&lt;/ul&gt;CVE-2015-1548 Justus W. Perlwitz of JWP Consulting reported this vulnerability to BUFFALO INC. and coordinated. After the coordination was completed, BUFFALO INC. reported the case to JPCERT/CC to notify users of the solution through JVN. CVE-2026-27650 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000046