{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27650", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2026-03-25T06:25:30.930Z", "datePublished": "2026-03-27T05:24:35.501Z", "dateUpdated": "2026-03-27T19:58:51.644Z"}, "containers": {"cna": {"affected": [{"vendor": "BUFFALO INC.", "product": "BUFFALO Wi-Fi router products", "versions": [{"version": "See \"References\" section", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products."}], "problemTypes": [{"descriptions": [{"description": "Improper neutralization of special elements used in an OS command ('OS Command Injection')", "lang": "en-US", "cweId": "CWE-78", "type": "CWE"}]}], "references": [{"url": "https://www.buffalo.jp/news/detail/20260323-01.html"}, {"url": "https://jvn.jp/en/jp/JVN83788689/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.6, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-03-27T05:24:35.501Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-27T19:58:33.808324Z", "id": "CVE-2026-27650", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T19:58:51.644Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27650", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-27T19:58:33.808324Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T19:58:46.867Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "BUFFALO INC.", "product": "BUFFALO Wi-Fi router products", "versions": [{"status": "affected", "version": "See \"References\" section"}]}], "references": [{"url": "https://www.buffalo.jp/news/detail/20260323-01.html"}, {"url": "https://jvn.jp/en/jp/JVN83788689/"}], "descriptions": [{"lang": "en", "value": "OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-78", "description": "Improper neutralization of special elements used in an OS command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-03-27T05:24:35.501Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27650", "state": "PUBLISHED", "dateUpdated": "2026-03-27T19:58:51.644Z", "dateReserved": "2026-03-25T06:25:30.930Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2026-03-27T05:24:35.501Z", "assignerShortName": "jpcert"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wcr-1166dhpl_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "70DE69B3-85D4-4FEF-AC34-3ED1BCA72455", "versionEndExcluding": "1.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wcr-1166dhpl:-:*:*:*:*:*:*:*", "matchCriteriaId": "52B41DFC-E60C-4BFF-8AB2-C6FB67194F98", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wsr3600be4-kh_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "57CD1A07-ADEB-43C6-BBD6-50F5CA3A1AAF", "versionEndExcluding": "6.02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wsr3600be4-kh:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E3EE1F5-07F2-428D-B5EB-071657EBCA96", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wsr3600be4p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6610DCC-EAEC-4464-880A-F19D7D823FEA", "versionEndExcluding": "5.02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wsr3600be4p:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD39E5F5-860E-4532-8E83-A6E36B30510E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-1750dhp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DED9D3D6-D64E-4E23-ACAF-02183CC8C619", "versionEndExcluding": "2.63", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-1750dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "22CD8F33-A455-4E4B-9351-CBBDA511E9D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-1750dhp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0530F376-C6FB-40CB-8F2B-C669EF97485F", "versionEndExcluding": "2.63", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-1750dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "7114614E-63C7-43DF-B778-CCDC4B753CA7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr18000be10p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C778B15C-D7A4-4671-8BE7-A46F0F2A010D", "versionEndExcluding": "5.03", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr18000be10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "873F681B-D7E9-47C3-BD50-FFBA545BF19D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-1900dhp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C3833629-E892-4522-A641-930FE1DF04FD", "versionEndExcluding": "2.53", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-1900dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "9F2F4145-1A55-41CE-9358-0192B69CA8E8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-1900dhp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "47EA0EBF-EB1F-450B-8E44-E61768A647E1", "versionEndExcluding": "2.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-1900dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "519FDA6D-520A-4FF9-A1FC-3144CB24B7D0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-1900dhp3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "060538D8-4D22-4BDB-8032-5C8388637508", "versionEndExcluding": "2.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-1900dhp3:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E5F5D9D-27F8-463E-B2B8-F4E77FAC648B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-5950ax12_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3619D0E7-E58D-4920-A1A4-8BD83534F6D5", "versionEndExcluding": "3.57", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-5950ax12:-:*:*:*:*:*:*:*", "matchCriteriaId": "703CB818-F27B-4981-A8F3-D5DD400767A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-6000ax12b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6107C437-069C-4090-958D-D4FA5F78C349", "versionEndExcluding": "3.57", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-6000ax12b:-:*:*:*:*:*:*:*", "matchCriteriaId": "94539115-283E-4C54-A51F-D519F48B2FB2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-6000ax12p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8706D545-7D8A-41FF-91FF-2C82554068F9", "versionEndExcluding": "3.57", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-6000ax12p:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D7BA869-029D-406B-B663-ADA58B94C8A5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wxr-6000ax12s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5250BC1-81E7-48C5-9363-AC3A55A02CE6", "versionEndExcluding": "3.57", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wxr-6000ax12s:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F718396-BB2C-4DA2-823B-178EC0F9101C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58B5B299-15EE-4ADB-ABD9-ADAF4E432006", "versionEndExcluding": "2.20", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-1166dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "98CE6294-43B2-4043-98A5-BCCAF17214C3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-1166dhp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C2E92E3E-315E-4482-B404-29E460BB220D", "versionEndExcluding": "2.20", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-1166dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "740500B4-8CEC-4044-8FE7-194FD0894534", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-1750dhp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C72B17A-BBD3-430E-914D-D2E77254F969", "versionEndExcluding": "2.32", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-1750dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "55459AEE-CE6D-4A4B-9B59-572EDFD51984", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-1750dhp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5DC3840D-47FD-4C70-B4CF-0B00B42799D7", "versionEndExcluding": "2.33", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-1750dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BBFF4B91-1173-4346-A1ED-60B37F7B44DA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-s1750dhp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D174F69-BC6E-435A-8A7C-CA33DD829A1D", "versionEndExcluding": "2.34", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-s1750dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A2F15AE-7A2C-46C0-8961-10180279FEB5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wrm-d2133hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "06640D46-FE11-491A-83B5-5C4113823DED", "versionEndExcluding": "3.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wrm-d2133hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7230C72-57D3-4C1C-8DCD-121926C018AF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wrm-d2133hs_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "259E1929-93EB-41B8-8C13-862300230FBA", "versionEndExcluding": "3.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wrm-d2133hs:-:*:*:*:*:*:*:*", "matchCriteriaId": "346D031C-A92D-4D59-A15B-994A2D69BD8C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wtr-m2133hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E4C5694-04B1-47A2-BEAD-40BE6D43279E", "versionEndExcluding": "3.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wtr-m2133hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "57A0A9C4-964B-4170-9CA5-2FAB65BE6E2B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wtr-m2133hs_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51BDED0A-BC25-43FD-AE54-451F5EF29BAB", "versionEndExcluding": "3.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wtr-m2133hs:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ADB3632-6A5D-420A-8FB8-FAA6BB8A50F2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wem-1266_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2D7EDE52-D795-4C10-A8F1-ADCB31A0A359", "versionEndExcluding": "2.87", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wem-1266:-:*:*:*:*:*:*:*", "matchCriteriaId": "F40FA714-2CD3-40B6-8F19-F0DE25320AF9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wem-1266wp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1E67DFA-16D9-41B9-8686-F2319174248E", "versionEndExcluding": "2.87", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wem-1266wp:-:*:*:*:*:*:*:*", "matchCriteriaId": "4988258A-FDA2-4402-A917-A9741D32FD79", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:vr-u300w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF9890A3-663A-4992-AB25-EB479C3212D0", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:vr-u300w:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FD4231B-5E7C-429E-9E0C-8CD3C6640FD6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:vr-u500x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34DA3705-4BEB-40F9-95F6-9BFEB6CDB641", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:vr-u500x:-:*:*:*:*:*:*:*", "matchCriteriaId": "37A81286-64F0-4748-8BC4-57E0737FB7F7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-1266r_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "381BE4D5-F1DE-4E99-974E-AABD2BF0EAF1", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-1266r:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BC85B49-6F64-4514-9466-E896D92FB33E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-1266wdpr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C8A917E9-5D21-43C2-B005-9708D2D9BF66", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-1266wdpr:-:*:*:*:*:*:*:*", "matchCriteriaId": "A04A468D-CD3A-47EF-96A4-E653A1CF2AB0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-1266wdpra_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "848F228C-0DB2-4683-9FAD-C2A3983E0161", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-1266wdpra:-:*:*:*:*:*:*:*", "matchCriteriaId": "7195B49B-00B5-4F43-A1A5-038B155667BA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-1750d_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A9BB1BB-E3BD-4C17-A7EF-9A7941A84976", "versionEndExcluding": "1.07", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-1750d:-:*:*:*:*:*:*:*", "matchCriteriaId": "47AD091A-8AC5-49B4-AD77-8B325C5A47DE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-2133r_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "565EA741-24AC-4D03-9CCE-E2DC310A9CC7", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-2133r:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BA15CF1-F1A5-491B-8BA3-450D0205FB03", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-2133tr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89FD7298-F6B5-4CF5-9CD2-482E4DF648AB", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-2133tr:-:*:*:*:*:*:*:*", "matchCriteriaId": "75EB5E4D-45BC-4805-8B96-7386F38ACED3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-ax4r_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "01CA1028-7357-4C17-98E3-228155EB02BA", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-ax4r:-:*:*:*:*:*:*:*", "matchCriteriaId": "06093D67-369A-4A85-8669-699E526EDE5C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-ax8r_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA0E48ED-DD3F-428E-8F92-3D2C360E9CB1", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-ax8r:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7FAC875-FA4E-4F5C-BB45-1850A472B188", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wapm-axetr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE54C16D-A1BB-4545-91C2-0E1C51CCE05A", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wapm-axetr:-:*:*:*:*:*:*:*", "matchCriteriaId": "801BACC4-D599-4FF8-9E69-CF78EEA9DAF4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:waps-1266_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "76BB0D3E-6F8B-420D-8ACC-26BAED31E1B7", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:waps-1266:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6C43BE0-B5D9-42F3-850F-E613C25F512F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:waps-ax4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7887E1FC-51A6-4BB6-A778-D8AD0FB4E2E4", "versionEndExcluding": "1.42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:waps-ax4:-:*:*:*:*:*:*:*", "matchCriteriaId": "971A3821-760E-4B4E-AB8D-57EF1BCC743D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:fs-m1266_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51510CF5-ACDB-4111-8427-B6C4A168025F", "versionEndExcluding": "4.13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:fs-m1266:-:*:*:*:*:*:*:*", "matchCriteriaId": "43994150-6056-4560-89F3-9D9B4B5BEF7C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:fs-s1266_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "94EFF27A-665B-406E-AC0D-43FD4CE35F5C", "versionEndExcluding": "4.13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:fs-s1266:-:*:*:*:*:*:*:*", "matchCriteriaId": "7BC69059-F0B0-4480-B882-D23847CC0D39", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-600dhp_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E0090140-CA70-4747-A5E9-A9AF00FC8AE2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "06AF9040-7F63-4E80-82DD-7448320BC940", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-600dhp2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C78A3795-B001-403E-AECB-F2110B784B42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-600dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "9271B665-2267-4C24-92FD-B1CBCB2F0F59", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-600dhp3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "61C5E983-8161-4DDD-9122-C30D8E056AD1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-600dhp3:-:*:*:*:*:*:*:*", "matchCriteriaId": "303225E6-81C0-4A2F-81A3-51E508DDA0EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-900dhp_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D219F2A-2A04-4305-A3AF-2DA61F760E0B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8BD47F3-29D0-4B34-A346-C0042FBD75ED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-900dhp2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E509B551-A2AB-4483-9111-EEB0433EE430", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-900dhp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "247B99DF-EE96-40C3-89FC-706DE878ABFE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-s600dhp_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "980BCDBD-BDF1-429A-A24B-51B4DE26D429", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-s600dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "75434B7A-2633-4981-B99D-33448883BC61", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:buffalo:wzr-s900dhp_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB08C247-2C08-4E90-9D26-D6FC878E7FDC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:buffalo:wzr-s900dhp:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7C186F6-8DE5-4C82-8403-D3BB76069FCE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products."}], "id": "CVE-2026-27650", "lastModified": "2026-03-31T19:04:01.203", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vultures@jpcert.or.jp", "type": "Secondary"}]}, "published": "2026-03-27T06:16:38.257", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/jp/JVN83788689/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.buffalo.jp/news/detail/20260323-01.html"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "vultures@jpcert.or.jp", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "See \"References\" section"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "BUFFALO Wi-Fi router products", "source": "cna", "vendor": "BUFFALO INC."}, "product": "wi-fi_router_products", "vendor": "buffalo"}], "analysis": {"en": {"generated_at": "2026-04-01T03:22:01.582235+00:00", "value": {"mitigation_remediation": ["Check Buffalo support for a firmware update that addresses the command\u2011injection vulnerability and upgrade the device firmware as soon as possible.", "If no update is immediately available, disable remote configuration or web interface access from untrusted networks.", "Restrict administrative access to the router using strong passwords, and enable two\u2011factor authentication if supported.", "Monitor the router\u2019s logs for suspicious command execution or unauthorized access attempts, and isolate the device from critical network segments until a fix is applied."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The flaw affects a broad range of Buffalo Wi\u2011Fi router products, including models such as FS\u2011M1266, FS\u2011S1266, VR\u2011U300W, VR\u2011U500X, WAPM\u20111266, WAPM\u20111750, WRM\u2011D2133, WSR\u20113600, WTR\u2011M2133, various WX\u2011R and WZR series. Affected firmware versions are unspecified, so any currently deployed firmware of these devices may be vulnerable.", "description_and_impact": "An OS command injection flaw allows an attacker to execute arbitrary commands on Buffalo Wi\u2011Fi router firmware, leading to complete compromise of the device. The vulnerability could be used to exfiltrate sensitive data, alter network traffic, or disrupt connectivity, thereby impacting confidentiality, integrity, and availability.", "risk_and_exploitability": "The CVSS score of 8.6 indicates high severity, while the EPSS score of less than 1% suggests a relatively low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog, and no public exploit has been reported. The likely attack vector is inferred to be remote network access via the device\u2019s web or configuration interface, which could expose the command injection payload to unauthenticated or authenticated users with sufficient privileges."}}}}, "created": "2026-03-27T09:22:15.296051+00:00", "title": "OS Command Injection in Buffalo Wi\u2011Fi Router Firmware", "updated": "2026-04-02T07:55:45.339081+00:00", "vendors": ["buffalo", "buffalo$PRODUCT$wi-fi_router_products"]}