CVE-2026-27650
criticalOS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.
Vendor / product: Buffalo — wcr-1166dhpl firmware
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
CVSS
9.8
9.8 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-03-27 06:16
Modified: 2026-10-26 21:10
NVD status: Analyzed
Last synced 2 days ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
buffalo / wcr-1166dhpl_firmware <1.01
buffalo / wsr3600be4-kh_firmware <6.02
buffalo / wsr3600be4p_firmware <5.02
buffalo / wxr-1750dhp_firmware <2.63
buffalo / wxr-1750dhp2_firmware <2.63
buffalo / wxr18000be10p_firmware <5.03
buffalo / wxr-1900dhp_firmware <2.53
buffalo / wxr-1900dhp2_firmware <2.62
buffalo / wxr-1900dhp3_firmware <2.66
buffalo / wxr-5950ax12_firmware <3.57
buffalo / wxr-6000ax12b_firmware <3.57
buffalo / wxr-6000ax12p_firmware <3.57
buffalo / wxr-6000ax12s_firmware <3.57
buffalo / wzr-1166dhp_firmware <2.20
buffalo / wzr-1166dhp2_firmware <2.20
buffalo / wzr-1750dhp_firmware <2.32
buffalo / wzr-1750dhp2_firmware <2.33
buffalo / wzr-s1750dhp_firmware <2.34
buffalo / wrm-d2133hp_firmware <3.01
buffalo / wrm-d2133hs_firmware <3.01
buffalo / wtr-m2133hp_firmware <3.01
buffalo / wtr-m2133hs_firmware <3.01
buffalo / wem-1266_firmware <2.87
buffalo / wem-1266wp_firmware <2.87
buffalo / vr-u300w_firmware <1.42
buffalo / vr-u500x_firmware <1.42
buffalo / wapm-1266r_firmware <1.42
buffalo / wapm-1266wdpr_firmware <1.42
buffalo / wapm-1266wdpra_firmware <1.42
buffalo / wapm-1750d_firmware <1.07
buffalo / wapm-2133r_firmware <1.42
buffalo / wapm-2133tr_firmware <1.42
buffalo / wapm-ax4r_firmware <1.42
buffalo / wapm-ax8r_firmware <1.42
buffalo / wapm-axetr_firmware <1.42
buffalo / waps-1266_firmware <1.42
buffalo / waps-ax4_firmware <1.42
buffalo / fs-m1266_firmware <4.13
buffalo / fs-s1266_firmware <4.13
buffalo / wzr-600dhp_firmware all versions
buffalo / wzr-600dhp2_firmware all versions
buffalo / wzr-600dhp3_firmware all versions
buffalo / wzr-900dhp_firmware all versions
buffalo / wzr-900dhp2_firmware all versions
buffalo / wzr-s600dhp_firmware all versions
buffalo / wzr-s900dhp_firmware all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://www.buffalo.jp/news/detail/20260323-01.html
References
- https://jvn.jp/en/jp/JVN83788689/ vultures@jpcert.or.jp
- https://www.buffalo.jp/news/detail/20260323-01.html vultures@jpcert.or.jp
Data sources
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗