Code injection in BUFFALO Wi-Fi router products
Priority LOW 39CWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00271 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BUFFALO INC. | BUFFALO Wi-Fi router products | See "References" section | — | No fix listed | CNA |
- BUFFALO Wi-Fi router products VendorBUFFALO INC. Affected See "References" section Fixed in — No fix listed CNA
CPE configurations NVD · 92
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:wcr-1166dhpl_firmware:*:*:*:*:*:*:*:* | before 1.01 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wcr-1166dhpl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wsr3600be4-kh_firmware:*:*:*:*:*:*:*:* | before 6.02 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wsr3600be4-kh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wsr3600be4p_firmware:*:*:*:*:*:*:*:* | before 5.02 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wsr3600be4p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-1750dhp_firmware:*:*:*:*:*:*:*:* | before 2.63 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-1750dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-1750dhp2_firmware:*:*:*:*:*:*:*:* | before 2.63 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-1750dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:wcr-1166dhpl_firmware:*:*:*:*:*:*:*:* Versions before 1.01 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wcr-1166dhpl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wsr3600be4-kh_firmware:*:*:*:*:*:*:*:* Versions before 6.02 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wsr3600be4-kh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wsr3600be4p_firmware:*:*:*:*:*:*:*:* Versions before 5.02 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wsr3600be4p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-1750dhp_firmware:*:*:*:*:*:*:*:* Versions before 2.63 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-1750dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-1750dhp2_firmware:*:*:*:*:*:*:*:* Versions before 2.63 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-1750dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Show 82 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:wxr18000be10p_firmware:*:*:*:*:*:*:*:* | before 5.03 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr18000be10p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-1900dhp_firmware:*:*:*:*:*:*:*:* | before 2.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-1900dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-1900dhp2_firmware:*:*:*:*:*:*:*:* | before 2.62 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-1900dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-1900dhp3_firmware:*:*:*:*:*:*:*:* | before 2.66 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-1900dhp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-5950ax12_firmware:*:*:*:*:*:*:*:* | before 3.57 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-5950ax12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-6000ax12b_firmware:*:*:*:*:*:*:*:* | before 3.57 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-6000ax12b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-6000ax12p_firmware:*:*:*:*:*:*:*:* | before 3.57 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-6000ax12p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wxr-6000ax12s_firmware:*:*:*:*:*:*:*:* | before 3.57 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wxr-6000ax12s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:* | before 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-1166dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-1166dhp2_firmware:*:*:*:*:*:*:*:* | before 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-1166dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-1750dhp_firmware:*:*:*:*:*:*:*:* | before 2.32 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-1750dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-1750dhp2_firmware:*:*:*:*:*:*:*:* | before 2.33 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-1750dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-s1750dhp_firmware:*:*:*:*:*:*:*:* | before 2.34 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-s1750dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wrm-d2133hp_firmware:*:*:*:*:*:*:*:* | before 3.01 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wrm-d2133hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wrm-d2133hs_firmware:*:*:*:*:*:*:*:* | before 3.01 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wrm-d2133hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wtr-m2133hp_firmware:*:*:*:*:*:*:*:* | before 3.01 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wtr-m2133hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wtr-m2133hs_firmware:*:*:*:*:*:*:*:* | before 3.01 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wtr-m2133hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wem-1266_firmware:*:*:*:*:*:*:*:* | before 2.87 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wem-1266:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wem-1266wp_firmware:*:*:*:*:*:*:*:* | before 2.87 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wem-1266wp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:vr-u300w_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:vr-u300w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:vr-u500x_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:vr-u500x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-1266r_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-1266r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-1266wdpr_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-1266wdpr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-1266wdpra_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-1266wdpra:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-1750d_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-1750d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-2133r_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-2133r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-2133tr_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-2133tr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-ax4r_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-ax4r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-ax8r_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-ax8r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wapm-axetr_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wapm-axetr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:waps-1266_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:waps-1266:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:waps-ax4_firmware:*:*:*:*:*:*:*:* | before 1.42 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:waps-ax4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-m1266_firmware:*:*:*:*:*:*:*:* | before 4.13 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-m1266:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-s1266_firmware:*:*:*:*:*:*:*:* | before 4.13 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-s1266:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-600dhp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-600dhp2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-600dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-600dhp3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-600dhp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-900dhp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-900dhp2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-900dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-s600dhp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-s600dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-s900dhp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-s900dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:wxr18000be10p_firmware:*:*:*:*:*:*:*:* Versions before 5.03 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr18000be10p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-1900dhp_firmware:*:*:*:*:*:*:*:* Versions before 2.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-1900dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-1900dhp2_firmware:*:*:*:*:*:*:*:* Versions before 2.62 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-1900dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-1900dhp3_firmware:*:*:*:*:*:*:*:* Versions before 2.66 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-1900dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-5950ax12_firmware:*:*:*:*:*:*:*:* Versions before 3.57 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-5950ax12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-6000ax12b_firmware:*:*:*:*:*:*:*:* Versions before 3.57 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-6000ax12b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-6000ax12p_firmware:*:*:*:*:*:*:*:* Versions before 3.57 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-6000ax12p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wxr-6000ax12s_firmware:*:*:*:*:*:*:*:* Versions before 3.57 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wxr-6000ax12s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:* Versions before 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-1166dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-1166dhp2_firmware:*:*:*:*:*:*:*:* Versions before 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-1166dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-1750dhp_firmware:*:*:*:*:*:*:*:* Versions before 2.32 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-1750dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-1750dhp2_firmware:*:*:*:*:*:*:*:* Versions before 2.33 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-1750dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-s1750dhp_firmware:*:*:*:*:*:*:*:* Versions before 2.34 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-s1750dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wrm-d2133hp_firmware:*:*:*:*:*:*:*:* Versions before 3.01 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wrm-d2133hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wrm-d2133hs_firmware:*:*:*:*:*:*:*:* Versions before 3.01 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wrm-d2133hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wtr-m2133hp_firmware:*:*:*:*:*:*:*:* Versions before 3.01 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wtr-m2133hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wtr-m2133hs_firmware:*:*:*:*:*:*:*:* Versions before 3.01 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wtr-m2133hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wem-1266_firmware:*:*:*:*:*:*:*:* Versions before 2.87 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wem-1266:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wem-1266wp_firmware:*:*:*:*:*:*:*:* Versions before 2.87 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wem-1266wp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:vr-u300w_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:vr-u300w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:vr-u500x_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:vr-u500x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-1266r_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-1266r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-1266wdpr_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-1266wdpr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-1266wdpra_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-1266wdpra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-1750d_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-1750d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-2133r_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-2133r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-2133tr_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-2133tr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-ax4r_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-ax4r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-ax8r_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-ax8r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wapm-axetr_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wapm-axetr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:waps-1266_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:waps-1266:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:waps-ax4_firmware:*:*:*:*:*:*:*:* Versions before 1.42 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:waps-ax4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-m1266_firmware:*:*:*:*:*:*:*:* Versions before 4.13 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-m1266:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-s1266_firmware:*:*:*:*:*:*:*:* Versions before 4.13 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-s1266:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-600dhp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-600dhp2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-600dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-600dhp3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-600dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-900dhp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-900dhp2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-900dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-s600dhp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-s600dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-s900dhp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-s900dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-32669
- 2026-10-03 Alias added: GHSA-vxrf-632h-2jj6
- 2026-10-25 Priority changed: MEDIUM → LOW
References
More BUFFALO INC. Fs-m1266 Firmware vulnerabilities
- TI-2026-22032 OS command injection in BUFFALO Wi-Fi router products CVSS 4.0HIGH 8.6
- TI-2026-25171 Authentication bypass in BUFFALO Wi-Fi router products CVSS 4.0HIGH 8.7
- TI-2026-25691 Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an… CVSS 4.0HIGH 8.6
- TI-2026-25767 Missing authentication in BUFFALO Wi-Fi router products CVSS 4.0MEDIUM 6.9
Sources
- CVE-2026-32669 · CVE Program
- CVE-2026-32669 · NVD
- FIRST EPSS
- GHSA-vxrf-632h-2jj6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences