Impacted ELECOM Wireless LAN Access Point Devices Due to Language Parameter Issues
CVE-2026-42950

5.1MEDIUM

Key Information:

Vendor

Elecom Co.,ltd.

Status
Wab-be187-m
Wab-be72-m
Wab-be36-m
Wab-be36-s
Vendor
CVE Published:
13 May 2026

What is CVE-2026-42950?

ELECOM wireless LAN access point devices suffer from a security flaw where the language parameter is not adequately validated. Affected users may encounter a broken admin page when accessing malicious sites while logged in. This could lead to compromised integrity of the web interface and poses a significant risk to device management. Users are advised to take precautions and ensure their devices are updated to reduce exposure.

Affected Version(s)

WAB-BE187-M v1.1.10 and earlier

WAB-BE36-M v1.1.3 and earlier

WAB-BE36-S v1.1.3 and earlier

References

https://www.elecom.co.jp/news/security/20260512-01/
https://jvn.jp/en/jp/JVN03037325/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.