Reflected Cross-Site Scripting Vulnerability in ELECOM Wireless LAN Routers and Access Points
CVE-2026-44387

5.1MEDIUM

Key Information:

Vendor

Elecom Co.,ltd.

Status
Wab-m1775-ps
Wab-s1775
Wab-m2133
Wab-i1750-ps
Vendor
CVE Published:
28 July 2026

What is CVE-2026-44387?

ELECOM wireless LAN routers and access points have a vulnerability that allows reflected cross-site scripting through their WebUI. When this vulnerability is exploited, attackers can execute arbitrary scripts within the web browser of logged-in users, potentially leading to unauthorized actions and data exposure. Users of these devices are advised to take necessary precautions to safeguard their information and apply any available updates.

Affected Version(s)

WAB-I1750-PS 0

WAB-M1775-PS 0

WAB-M2133 0

References

https://www.elecom.co.jp/news/security/20260728-01/
https://jvn.jp/en/jp/JVN56870912/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.