Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-22550

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.

Description

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-X6000XS-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X6000XST-G

  • v1.16 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GS-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GSA-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-X1500GS-B

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X1500GSA-B

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-B

  • v1.09 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-W

  • v1.09 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2A-B

  • v1.09 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GST2-B

  • v1.06 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GS-B

  • v1.19 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSA-B

  • v1.19 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSH-B

  • v1.19 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QS-G

  • v1.14 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QSA-G

  • v1.14 and earlieraffected

References