Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

2. Jun 17, 2026 · NIST NVD

   Updated

   Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

Affected

• cpe buffalo/wcr-1166dhpl firmwareversion unspecified
• cpe buffalo/wsr3600be4-kh firmwareversion unspecified
• cpe buffalo/wsr3600be4p firmwareversion unspecified
• cpe buffalo/wxr-1750dhp firmwareversion unspecified
• cpe buffalo/wxr-1750dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp firmwareversion unspecified
• cpe buffalo/wxr-1900dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp3 firmwareversion unspecified
• cpe buffalo/wxr-5950ax12 firmwareversion unspecified
• cpe buffalo/wxr-6000ax12b firmwareversion unspecified
• cpe buffalo/wxr18000be10p firmwareversion unspecified
• cpe buffalo/wzr-s900dhp firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-32678

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-32678

  Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Vendor Advisory · buffalo.jp