Code injection vulnerability exists in BUFFALO Wi-Fi router products.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

2. Jun 17, 2026 · NIST NVD

   Updated

   Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

Affected

• cpe buffalo/wcr-1166dhpl firmwareversion unspecified
• cpe buffalo/wsr3600be4-kh firmwareversion unspecified
• cpe buffalo/wsr3600be4p firmwareversion unspecified
• cpe buffalo/wxr-1750dhp firmwareversion unspecified
• cpe buffalo/wxr-1750dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp firmwareversion unspecified
• cpe buffalo/wxr-1900dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp3 firmwareversion unspecified
• cpe buffalo/wxr-5950ax12 firmwareversion unspecified
• cpe buffalo/wxr-6000ax12b firmwareversion unspecified
• cpe buffalo/wxr-6000ax12p firmwareversion unspecified
• cpe buffalo/wxr18000be10p firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-32669

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-32669

  Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Vendor Advisory · buffalo.jp