Wab Be36 M

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wab-be36-m:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWab Be36 M (2f93d58a-9f90-53a4-94cd-67758cb570cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42961 vulnerable 2026-06-08 08:03:16.995062 Details available
MEDIUM (4.3)
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.
Published: 2026-05-13T12:02:22.642Z
Updated: 2026-05-13T15:04:39.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42950 vulnerable 2026-06-08 08:03:16.993413 Details available
MEDIUM (4.3)
ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may become broken.
Published: 2026-05-13T12:02:12.851Z
Updated: 2026-05-13T15:05:49.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42948 vulnerable 2026-06-08 08:03:16.992118 Details available
MEDIUM (4.8)
Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.
Published: 2026-05-13T12:02:03.914Z
Updated: 2026-05-13T15:06:33.320Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.