Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in t…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

2. Jun 17, 2026 · NIST NVD

   Updated

   Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

Affected

• cpe buffalo/wcr-1166dhpl firmwareversion unspecified
• cpe buffalo/wsr3600be4-kh firmwareversion unspecified
• cpe buffalo/wsr3600be4p firmwareversion unspecified
• cpe buffalo/wxr-1750dhp firmwareversion unspecified
• cpe buffalo/wxr-1750dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp firmwareversion unspecified
• cpe buffalo/wxr-1900dhp2 firmwareversion unspecified
• cpe buffalo/wxr-1900dhp3 firmwareversion unspecified
• cpe buffalo/wxr-5950ax12 firmwareversion unspecified
• cpe buffalo/wxr-6000ax12b firmwareversion unspecified
• cpe buffalo/wxr-6000ax12p firmwareversion unspecified
• cpe buffalo/wxr18000be10p firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33280

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33280

  Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Vendor Advisory · buffalo.jp