# CVE-2026-32678: Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical… Source: https://junglewise.ai/threats/cve-2026-32678-authentication-bypass-issue-exists-in-buffalo-wi-fi-router Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-03-27 License: CC BY 4.0 with a link back CVE-2026-32678 · Severity: high · CVSS 7.5 · Published 2026-03-27 Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication. Technologies: [Buffalo Fs-M1266](https://junglewise.ai/threats/technologies/fs-m1266), [Buffalo Fs-M1266 Firmware](https://junglewise.ai/threats/technologies/fs-m1266-firmware), [Buffalo Fs-S1266](https://junglewise.ai/threats/technologies/fs-s1266), [Buffalo Fs-S1266 Firmware](https://junglewise.ai/threats/technologies/fs-s1266-firmware), [Buffalo Vr-U300w](https://junglewise.ai/threats/technologies/vr-u300w), [Buffalo Vr-U300w Firmware](https://junglewise.ai/threats/technologies/vr-u300w-firmware), [Buffalo Vr-U500x](https://junglewise.ai/threats/technologies/vr-u500x), [Buffalo Vr-U500x Firmware](https://junglewise.ai/threats/technologies/vr-u500x-firmware), [Buffalo Wapm-1266r](https://junglewise.ai/threats/technologies/wapm-1266r), [Buffalo Wapm-1266r Firmware](https://junglewise.ai/threats/technologies/wapm-1266r-firmware), [Buffalo Wapm-1266wdpr](https://junglewise.ai/threats/technologies/wapm-1266wdpr), [Buffalo Wapm-1266wdpr Firmware](https://junglewise.ai/threats/technologies/wapm-1266wdpr-firmware), [Buffalo Wapm-1266wdpra](https://junglewise.ai/threats/technologies/wapm-1266wdpra), [Buffalo Wapm-1266wdpra Firmware](https://junglewise.ai/threats/technologies/wapm-1266wdpra-firmware), [Buffalo Wapm-1750d](https://junglewise.ai/threats/technologies/wapm-1750d), [Buffalo Wapm-1750d Firmware](https://junglewise.ai/threats/technologies/wapm-1750d-firmware), [Buffalo Wapm-2133r](https://junglewise.ai/threats/technologies/wapm-2133r), [Buffalo Wapm-2133r Firmware](https://junglewise.ai/threats/technologies/wapm-2133r-firmware), [Buffalo Wapm-2133tr](https://junglewise.ai/threats/technologies/wapm-2133tr), [Buffalo Wapm-2133tr Firmware](https://junglewise.ai/threats/technologies/wapm-2133tr-firmware), [Buffalo Wapm-Ax4r](https://junglewise.ai/threats/technologies/wapm-ax4r), [Buffalo Wapm-Ax4r Firmware](https://junglewise.ai/threats/technologies/wapm-ax4r-firmware), [Buffalo Wapm-Ax8r](https://junglewise.ai/threats/technologies/wapm-ax8r), [Buffalo Wapm-Ax8r Firmware](https://junglewise.ai/threats/technologies/wapm-ax8r-firmware), [Buffalo Wapm-Axetr](https://junglewise.ai/threats/technologies/wapm-axetr), [Buffalo Wapm-Axetr Firmware](https://junglewise.ai/threats/technologies/wapm-axetr-firmware), [Buffalo Waps-1266](https://junglewise.ai/threats/technologies/waps-1266), [Buffalo Waps-1266 Firmware](https://junglewise.ai/threats/technologies/waps-1266-firmware), [Buffalo Waps-Ax4](https://junglewise.ai/threats/technologies/waps-ax4), [Buffalo Waps-Ax4 Firmware](https://junglewise.ai/threats/technologies/waps-ax4-firmware), [Buffalo Wcr-1166dhpl](https://junglewise.ai/threats/technologies/wcr-1166dhpl), [Buffalo Wcr-1166dhpl Firmware](https://junglewise.ai/threats/technologies/wcr-1166dhpl-firmware), [Buffalo Wem-1266](https://junglewise.ai/threats/technologies/wem-1266), [Buffalo Wem-1266 Firmware](https://junglewise.ai/threats/technologies/wem-1266-firmware), [Buffalo Wem-1266wp](https://junglewise.ai/threats/technologies/wem-1266wp), [Buffalo Wem-1266wp Firmware](https://junglewise.ai/threats/technologies/wem-1266wp-firmware), [Buffalo Wrm-D2133hp](https://junglewise.ai/threats/technologies/wrm-d2133hp), [Buffalo Wrm-D2133hp Firmware](https://junglewise.ai/threats/technologies/wrm-d2133hp-firmware), [Buffalo Wrm-D2133hs](https://junglewise.ai/threats/technologies/wrm-d2133hs), [Buffalo Wrm-D2133hs Firmware](https://junglewise.ai/threats/technologies/wrm-d2133hs-firmware), [Buffalo Wsr3600be4-Kh](https://junglewise.ai/threats/technologies/wsr3600be4-kh), [Buffalo Wsr3600be4-Kh Firmware](https://junglewise.ai/threats/technologies/wsr3600be4-kh-firmware), [Buffalo Wsr3600be4p](https://junglewise.ai/threats/technologies/wsr3600be4p), [Buffalo Wsr3600be4p Firmware](https://junglewise.ai/threats/technologies/wsr3600be4p-firmware), [Buffalo Wtr-M2133hp](https://junglewise.ai/threats/technologies/wtr-m2133hp), [Buffalo Wtr-M2133hp Firmware](https://junglewise.ai/threats/technologies/wtr-m2133hp-firmware), [Buffalo Wtr-M2133hs](https://junglewise.ai/threats/technologies/wtr-m2133hs), [Buffalo Wtr-M2133hs Firmware](https://junglewise.ai/threats/technologies/wtr-m2133hs-firmware), [Buffalo Wxr-1750dhp](https://junglewise.ai/threats/technologies/wxr-1750dhp), [Buffalo Wxr-1750dhp Firmware](https://junglewise.ai/threats/technologies/wxr-1750dhp-firmware), [Buffalo Wxr-1750dhp2](https://junglewise.ai/threats/technologies/wxr-1750dhp2), [Buffalo Wxr-1750dhp2 Firmware](https://junglewise.ai/threats/technologies/wxr-1750dhp2-firmware), [Buffalo Wxr-1900dhp](https://junglewise.ai/threats/technologies/wxr-1900dhp), [Buffalo Wxr-1900dhp Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp-firmware), [Buffalo Wxr-1900dhp2](https://junglewise.ai/threats/technologies/wxr-1900dhp2), [Buffalo Wxr-1900dhp2 Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp2-firmware), [Buffalo Wxr-1900dhp3](https://junglewise.ai/threats/technologies/wxr-1900dhp3), [Buffalo Wxr-1900dhp3 Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp3-firmware), [Buffalo Wxr-5950ax12](https://junglewise.ai/threats/technologies/wxr-5950ax12), [Buffalo Wxr-5950ax12 Firmware](https://junglewise.ai/threats/technologies/wxr-5950ax12-firmware), [Buffalo Wxr-6000ax12b](https://junglewise.ai/threats/technologies/wxr-6000ax12b), [Buffalo Wxr-6000ax12b Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12b-firmware), [Buffalo Wxr-6000ax12p](https://junglewise.ai/threats/technologies/wxr-6000ax12p), [Buffalo Wxr-6000ax12p Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12p-firmware), [Buffalo Wxr-6000ax12s](https://junglewise.ai/threats/technologies/wxr-6000ax12s), [Buffalo Wxr-6000ax12s Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12s-firmware), [Buffalo Wxr18000be10p](https://junglewise.ai/threats/technologies/wxr18000be10p), [Buffalo Wxr18000be10p Firmware](https://junglewise.ai/threats/technologies/wxr18000be10p-firmware), [Buffalo Wzr-1166dhp](https://junglewise.ai/threats/technologies/wzr-1166dhp), [Buffalo Wzr-1166dhp Firmware](https://junglewise.ai/threats/technologies/wzr-1166dhp-firmware), [Buffalo Wzr-1166dhp2](https://junglewise.ai/threats/technologies/wzr-1166dhp2), [Buffalo Wzr-1166dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-1166dhp2-firmware), [Buffalo Wzr-1750dhp](https://junglewise.ai/threats/technologies/wzr-1750dhp), [Buffalo Wzr-1750dhp Firmware](https://junglewise.ai/threats/technologies/wzr-1750dhp-firmware), [Buffalo Wzr-1750dhp2](https://junglewise.ai/threats/technologies/wzr-1750dhp2), [Buffalo Wzr-1750dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-1750dhp2-firmware), [Buffalo Wzr-600dhp](https://junglewise.ai/threats/technologies/wzr-600dhp), [Buffalo Wzr-600dhp Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp-firmware), [Buffalo Wzr-600dhp2](https://junglewise.ai/threats/technologies/wzr-600dhp2), [Buffalo Wzr-600dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp2-firmware), [Buffalo Wzr-600dhp3](https://junglewise.ai/threats/technologies/wzr-600dhp3), [Buffalo Wzr-600dhp3 Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp3-firmware), [Buffalo Wzr-900dhp](https://junglewise.ai/threats/technologies/wzr-900dhp), [Buffalo Wzr-900dhp Firmware](https://junglewise.ai/threats/technologies/wzr-900dhp-firmware), [Buffalo Wzr-900dhp2](https://junglewise.ai/threats/technologies/wzr-900dhp2), [Buffalo Wzr-900dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-900dhp2-firmware), [Buffalo Wzr-S1750dhp](https://junglewise.ai/threats/technologies/wzr-s1750dhp), [Buffalo Wzr-S1750dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s1750dhp-firmware), [Buffalo Wzr-S600dhp](https://junglewise.ai/threats/technologies/wzr-s600dhp), [Buffalo Wzr-S600dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s600dhp-firmware), [Buffalo Wzr-S900dhp](https://junglewise.ai/threats/technologies/wzr-s900dhp), [Buffalo Wzr-S900dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s900dhp-firmware). Vendors: [Buffalo](https://junglewise.ai/threats/vendors/buffalo). ## Quick answers **Is CVE-2026-32678 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-32678 being exploited in the wild. **How severe is CVE-2026-32678?** High severity, with a CVSS score of 7.5, published 27 March 2026. **Which products and versions are affected?** Buffalo Fs-M1266, Buffalo Fs-M1266 Firmware, Buffalo Fs-S1266, Buffalo Fs-S1266 Firmware and 88 more. The advisory does not name versions. **Is there a fix for CVE-2026-32678?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-32678?** Check whether you run Buffalo Fs-M1266, Buffalo Fs-M1266 Firmware, Buffalo Fs-S1266 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - Buffalo Fs-M1266 - Buffalo Fs-M1266 Firmware - Buffalo Fs-S1266 - Buffalo Fs-S1266 Firmware - Buffalo Vr-U300w - Buffalo Vr-U300w Firmware - Buffalo Vr-U500x - Buffalo Vr-U500x Firmware - Buffalo Wapm-1266r - Buffalo Wapm-1266r Firmware - Buffalo Wapm-1266wdpr - Buffalo Wapm-1266wdpr Firmware - Buffalo Wapm-1266wdpra - Buffalo Wapm-1266wdpra Firmware - Buffalo Wapm-1750d - Buffalo Wapm-1750d Firmware - Buffalo Wapm-2133r - Buffalo Wapm-2133r Firmware - Buffalo Wapm-2133tr - Buffalo Wapm-2133tr Firmware - Buffalo Wapm-Ax4r - Buffalo Wapm-Ax4r Firmware - Buffalo Wapm-Ax8r - Buffalo Wapm-Ax8r Firmware - Buffalo Wapm-Axetr - Buffalo Wapm-Axetr Firmware - Buffalo Waps-1266 - Buffalo Waps-1266 Firmware - Buffalo Waps-Ax4 - Buffalo Waps-Ax4 Firmware - Buffalo Wcr-1166dhpl - Buffalo Wcr-1166dhpl Firmware - Buffalo Wem-1266 - Buffalo Wem-1266 Firmware - Buffalo Wem-1266wp - Buffalo Wem-1266wp Firmware - Buffalo Wrm-D2133hp - Buffalo Wrm-D2133hp Firmware - Buffalo Wrm-D2133hs - Buffalo Wrm-D2133hs Firmware - Buffalo Wsr3600be4-Kh - Buffalo Wsr3600be4-Kh Firmware - Buffalo Wsr3600be4p - Buffalo Wsr3600be4p Firmware - Buffalo Wtr-M2133hp - Buffalo Wtr-M2133hp Firmware - Buffalo Wtr-M2133hs - Buffalo Wtr-M2133hs Firmware - Buffalo Wxr-1750dhp - Buffalo Wxr-1750dhp Firmware - Buffalo Wxr-1750dhp2 - Buffalo Wxr-1750dhp2 Firmware - Buffalo Wxr-1900dhp - Buffalo Wxr-1900dhp Firmware - Buffalo Wxr-1900dhp2 - Buffalo Wxr-1900dhp2 Firmware - Buffalo Wxr-1900dhp3 - Buffalo Wxr-1900dhp3 Firmware - Buffalo Wxr-5950ax12 - Buffalo Wxr-5950ax12 Firmware - Buffalo Wxr-6000ax12b - Buffalo Wxr-6000ax12b Firmware - Buffalo Wxr-6000ax12p - Buffalo Wxr-6000ax12p Firmware - Buffalo Wxr-6000ax12s - Buffalo Wxr-6000ax12s Firmware - Buffalo Wxr18000be10p - Buffalo Wxr18000be10p Firmware - Buffalo Wzr-1166dhp - Buffalo Wzr-1166dhp Firmware - Buffalo Wzr-1166dhp2 - Buffalo Wzr-1166dhp2 Firmware - Buffalo Wzr-1750dhp - Buffalo Wzr-1750dhp Firmware - Buffalo Wzr-1750dhp2 - Buffalo Wzr-1750dhp2 Firmware - Buffalo Wzr-600dhp - Buffalo Wzr-600dhp Firmware - Buffalo Wzr-600dhp2 - Buffalo Wzr-600dhp2 Firmware - Buffalo Wzr-600dhp3 - Buffalo Wzr-600dhp3 Firmware - Buffalo Wzr-900dhp - Buffalo Wzr-900dhp Firmware - Buffalo Wzr-900dhp2 - Buffalo Wzr-900dhp2 Firmware - Buffalo Wzr-S1750dhp - Buffalo Wzr-S1750dhp Firmware - Buffalo Wzr-S600dhp - Buffalo Wzr-S600dhp Firmware - Buffalo Wzr-S900dhp - Buffalo Wzr-S900dhp Firmware ## Related threats - [Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to…](https://junglewise.ai/threats/cve-2026-33366-missing-authentication-for-critical-function-vulnerability-in) - [Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the…](https://junglewise.ai/threats/cve-2026-33280-hidden-functionality-issue-exists-in-buffalo-wi-fi-router) - [Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary…](https://junglewise.ai/threats/cve-2026-32669-code-injection-vulnerability-exists-in-buffalo-wi-fi-router) - [OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an…](https://junglewise.ai/threats/cve-2026-27650-os-command-injection-vulnerability-exists-in-buffalo-wi-fi-router)