OS Command Injection Vulnerability in Elecom WRC-X1500GS-B and WRC-X1500GSA-B
CVE-2026-22550

8.6HIGH

Key Information:

Vendor

Elecom Co.,ltd.

Status
Wrc-x1500gs-b
Wrc-x1500gsa-b
Vendor
CVE Published:
3 February 2026

What is CVE-2026-22550?

An OS command injection vulnerability exists in the Elecom WRC-X1500GS-B and WRC-X1500GSA-B models. When a logged-in user sends a specially crafted request, it may lead to unauthorized execution of arbitrary operating system commands. This poses a significant security risk, potentially allowing attackers to execute commands remotely and compromise the security of the device and the network it connects to.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WRC-X1500GS-B v1.12 and earlier versions

WRC-X1500GSA-B v1.12 and earlier versions

References

https://www.elecom.co.jp/news/security/20260203-01/
https://jvn.jp/en/jp/JVN94012927/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.