๐Ÿ” CVE Alert

CVE-2026-22550

HIGH 7.2
CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
12th

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.

Vendor elecom co.,ltd.
Product wrc-x6000xs-g
Published Feb 3, 2026
Last Updated May 12, 2026
Stay Ahead of the Next One

Get instant alerts for elecom co.,ltd. wrc-x6000xs-g

Be the first to know when new high vulnerabilities affecting elecom co.,ltd. wrc-x6000xs-g are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Versions

ELECOM CO.,LTD. / WRC-X6000XS-G
v1.12 and earlier
ELECOM CO.,LTD. / WRC-X6000XST-G
v1.16 and earlier
ELECOM CO.,LTD. / WRC-XE5400GS-G
v1.13 and earlier
ELECOM CO.,LTD. / WRC-XE5400GSA-G
v1.13 and earlier
ELECOM CO.,LTD. / WRC-X1500GS-B
v1.12 and earlier
ELECOM CO.,LTD. / WRC-X1500GSA-B
v1.12 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2-B
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2-W
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2A-B
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GST2-B
v1.06 and earlier
ELECOM CO.,LTD. / WRC-X1800GS-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X1800GSA-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X1800GSH-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X6000QS-G
v1.14 and earlier
ELECOM CO.,LTD. / WRC-X6000QSA-G
v1.14 and earlier

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
elecom.co.jp: https://www.elecom.co.jp/news/security/20260203-01/ jvn.jp: https://jvn.jp/en/jp/JVN94012927/