CVE-2026-4622
OS Command Injection vulnerability in NEC Platforms, Ltd.
Published Mar 27, 2026 · updated Jun 17, 2026 · nec aterm wg2600hs firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2026 · NIST NVD
Detected
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Jun 17, 2026 · NIST NVD
Updated
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Affected
- cpe nec/aterm gb1200pe firmwareversion unspecified
- cpe nec/aterm wf1200cr firmwareversion unspecified
- cpe nec/aterm wg1200cr firmwareversion unspecified
- cpe nec/aterm wg2600hm4 firmwareversion unspecified
- cpe nec/aterm wg2600hp4 firmwareversion unspecified
- cpe nec/aterm wg2600hs firmwareversion unspecified
- cpe nec/aterm wg2600hs2 firmwareversion unspecified
- cpe nec/aterm wx3000hp firmwareversion unspecified
- cpe nec/aterm wx3000hp2 firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-4622
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4622
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
nvd.nist.gov