CVE-2026-4620
OS Command Injection vulnerability in NEC Platforms, Ltd.
Published Mar 27, 2026 · updated Jun 17, 2026 · nec aterm wx3600hp firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2026 · NIST NVD
Detected
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Jun 17, 2026 · NIST NVD
Updated
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Affected
- cpe nec/aterm wx1500hp firmwareversion unspecified
- cpe nec/aterm wx3600hp firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-4620
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4620
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
nvd.nist.gov