High 8.6Published Mar 27, 2026

CVE-2026-27650OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.

Updated under an hour ago (Oct 26, 2026, 7:10 PM ET)

Does this affect you?

It affects BUFFALO INC. BUFFALO Wi-Fi router products and 46 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for BUFFALO INC. BUFFALO Wi-Fi router products

Exploited in the last 30 days

OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.

CVSS: 8.6 HIGH (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-78
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: jpcert
NVD analysis: Analyzed
Record last updated: Mar 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

BUFFALO INC. BUFFALO Wi-Fi router products buffalo:wi_fi_router_products (from the name)	See "References" section	CNA record
buffalo wcr-1166dhpl_firmware buffalo:wcr-1166dhpl_firmware	before 1.01	NVD
buffalo wsr3600be4-kh_firmware buffalo:wsr3600be4-kh_firmware	before 6.02	NVD
buffalo wsr3600be4p_firmware buffalo:wsr3600be4p_firmware	before 5.02	NVD
buffalo wxr-1750dhp_firmware buffalo:wxr-1750dhp_firmware	before 2.63	NVD
buffalo wxr-1750dhp2_firmware buffalo:wxr-1750dhp2_firmware	before 2.63	NVD
buffalo wxr18000be10p_firmware buffalo:wxr18000be10p_firmware	before 5.03	NVD
buffalo wxr-1900dhp_firmware buffalo:wxr-1900dhp_firmware	before 2.53	NVD
buffalo wxr-1900dhp2_firmware buffalo:wxr-1900dhp2_firmware	before 2.62	NVD
buffalo wxr-1900dhp3_firmware buffalo:wxr-1900dhp3_firmware	before 2.66	NVD
1–10 of 47

References

References

https://www.buffalo.jp/news/detail/20260323-01.html	vendor-advisory
https://jvn.jp/en/jp/JVN83788689/	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.