# Buffalo vulnerabilities Source: https://junglewise.ai/threats/vendors/buffalo Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/buffalo.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in Buffalo: 0 in the last 7 days and 2 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95104, was published on 28 September 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before. 92 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 2 - All time: 8 (3 critical, 0 exploited in the wild) ## About Buffalo Buffalo Inc. is a manufacturer of computer peripherals, including network-attached storage, routers, and portable hard drives. ## Latest Buffalo vulnerabilities - [CVE-2026-95104: Buffalo WSR-300HP and WEX-G300 stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-95104-stack-based-buffer-overflow-vulnerability-exists-in-buffalo-wi-fi) (high, CVSS 7.5, published 28 Sep 2026) - [CVE-2026-86530: BUFFALO Wi-Fi products OS command injection](https://junglewise.ai/threats/cve-2026-86530-buffalo-wi-fi-products-handle-some-web-form-input-improperly-to) (high, CVSS 7.2, published 28 Sep 2026) - [CVE-2026-33366: Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to…](https://junglewise.ai/threats/cve-2026-33366-missing-authentication-for-critical-function-vulnerability-in) (medium, CVSS 5.3, published 27 Mar 2026) - [CVE-2026-33280: Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the…](https://junglewise.ai/threats/cve-2026-33280-hidden-functionality-issue-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-32678: Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical…](https://junglewise.ai/threats/cve-2026-32678-authentication-bypass-issue-exists-in-buffalo-wi-fi-router) (high, CVSS 7.5, published 27 Mar 2026) - [CVE-2026-32669: Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary…](https://junglewise.ai/threats/cve-2026-32669-code-injection-vulnerability-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-27650: OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an…](https://junglewise.ai/threats/cve-2026-27650-os-command-injection-vulnerability-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-29516: Buffalo TeraStation NAS TS5400R excessive file permissions in /etc/shadow](https://junglewise.ai/threats/cve-2026-29516-buffalo-terastation-nas-ts5400r-excessive-file-permissions-in-etc) (medium, CVSS 4.9, published 16 Mar 2026) ## Most severe Buffalo vulnerabilities - [CVE-2026-27650: OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an…](https://junglewise.ai/threats/cve-2026-27650-os-command-injection-vulnerability-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-33280: Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the…](https://junglewise.ai/threats/cve-2026-33280-hidden-functionality-issue-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-32669: Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary…](https://junglewise.ai/threats/cve-2026-32669-code-injection-vulnerability-exists-in-buffalo-wi-fi-router) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-32678: Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical…](https://junglewise.ai/threats/cve-2026-32678-authentication-bypass-issue-exists-in-buffalo-wi-fi-router) (high, CVSS 7.5, published 27 Mar 2026) - [CVE-2026-95104: Buffalo WSR-300HP and WEX-G300 stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-95104-stack-based-buffer-overflow-vulnerability-exists-in-buffalo-wi-fi) (high, CVSS 7.5, published 28 Sep 2026) - [CVE-2026-86530: BUFFALO Wi-Fi products OS command injection](https://junglewise.ai/threats/cve-2026-86530-buffalo-wi-fi-products-handle-some-web-form-input-improperly-to) (high, CVSS 7.2, published 28 Sep 2026) - [CVE-2026-33366: Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to…](https://junglewise.ai/threats/cve-2026-33366-missing-authentication-for-critical-function-vulnerability-in) (medium, CVSS 5.3, published 27 Mar 2026) - [CVE-2026-29516: Buffalo TeraStation NAS TS5400R excessive file permissions in /etc/shadow](https://junglewise.ai/threats/cve-2026-29516-buffalo-terastation-nas-ts5400r-excessive-file-permissions-in-etc) (medium, CVSS 4.9, published 16 Mar 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 2 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Buffalo technologies - [Buffalo Fs-M1266](https://junglewise.ai/threats/technologies/fs-m1266): 5 vulnerabilities - [Buffalo Fs-M1266 Firmware](https://junglewise.ai/threats/technologies/fs-m1266-firmware): 5 vulnerabilities - [Buffalo Fs-S1266](https://junglewise.ai/threats/technologies/fs-s1266): 5 vulnerabilities - [Buffalo Fs-S1266 Firmware](https://junglewise.ai/threats/technologies/fs-s1266-firmware): 5 vulnerabilities - [Buffalo Vr-U300w](https://junglewise.ai/threats/technologies/vr-u300w): 5 vulnerabilities - [Buffalo Vr-U300w Firmware](https://junglewise.ai/threats/technologies/vr-u300w-firmware): 5 vulnerabilities - [Buffalo Vr-U500x](https://junglewise.ai/threats/technologies/vr-u500x): 5 vulnerabilities - [Buffalo Vr-U500x Firmware](https://junglewise.ai/threats/technologies/vr-u500x-firmware): 5 vulnerabilities - [Buffalo Wapm-1266r](https://junglewise.ai/threats/technologies/wapm-1266r): 5 vulnerabilities - [Buffalo Wapm-1266r Firmware](https://junglewise.ai/threats/technologies/wapm-1266r-firmware): 5 vulnerabilities - [Buffalo Wapm-1266wdpr](https://junglewise.ai/threats/technologies/wapm-1266wdpr): 5 vulnerabilities - [Buffalo Wapm-1266wdpr Firmware](https://junglewise.ai/threats/technologies/wapm-1266wdpr-firmware): 5 vulnerabilities - [Buffalo Wapm-1266wdpra](https://junglewise.ai/threats/technologies/wapm-1266wdpra): 5 vulnerabilities - [Buffalo Wapm-1266wdpra Firmware](https://junglewise.ai/threats/technologies/wapm-1266wdpra-firmware): 5 vulnerabilities - [Buffalo Wapm-1750d](https://junglewise.ai/threats/technologies/wapm-1750d): 5 vulnerabilities - [Buffalo Wapm-1750d Firmware](https://junglewise.ai/threats/technologies/wapm-1750d-firmware): 5 vulnerabilities - [Buffalo Wapm-2133r](https://junglewise.ai/threats/technologies/wapm-2133r): 5 vulnerabilities - [Buffalo Wapm-2133r Firmware](https://junglewise.ai/threats/technologies/wapm-2133r-firmware): 5 vulnerabilities - [Buffalo Wapm-2133tr](https://junglewise.ai/threats/technologies/wapm-2133tr): 5 vulnerabilities - [Buffalo Wapm-2133tr Firmware](https://junglewise.ai/threats/technologies/wapm-2133tr-firmware): 5 vulnerabilities - [Buffalo Wapm-Ax4r](https://junglewise.ai/threats/technologies/wapm-ax4r): 5 vulnerabilities - [Buffalo Wapm-Ax4r Firmware](https://junglewise.ai/threats/technologies/wapm-ax4r-firmware): 5 vulnerabilities - [Buffalo Wapm-Ax8r](https://junglewise.ai/threats/technologies/wapm-ax8r): 5 vulnerabilities - [Buffalo Wapm-Ax8r Firmware](https://junglewise.ai/threats/technologies/wapm-ax8r-firmware): 5 vulnerabilities - [Buffalo Wapm-Axetr](https://junglewise.ai/threats/technologies/wapm-axetr): 5 vulnerabilities - [Buffalo Wapm-Axetr Firmware](https://junglewise.ai/threats/technologies/wapm-axetr-firmware): 5 vulnerabilities - [Buffalo Waps-1266](https://junglewise.ai/threats/technologies/waps-1266): 5 vulnerabilities - [Buffalo Waps-1266 Firmware](https://junglewise.ai/threats/technologies/waps-1266-firmware): 5 vulnerabilities - [Buffalo Waps-Ax4](https://junglewise.ai/threats/technologies/waps-ax4): 5 vulnerabilities - [Buffalo Waps-Ax4 Firmware](https://junglewise.ai/threats/technologies/waps-ax4-firmware): 5 vulnerabilities - [Buffalo Wcr-1166dhpl](https://junglewise.ai/threats/technologies/wcr-1166dhpl): 5 vulnerabilities - [Buffalo Wcr-1166dhpl Firmware](https://junglewise.ai/threats/technologies/wcr-1166dhpl-firmware): 5 vulnerabilities - [Buffalo Wem-1266](https://junglewise.ai/threats/technologies/wem-1266): 5 vulnerabilities - [Buffalo Wem-1266 Firmware](https://junglewise.ai/threats/technologies/wem-1266-firmware): 5 vulnerabilities - [Buffalo Wem-1266wp](https://junglewise.ai/threats/technologies/wem-1266wp): 5 vulnerabilities - [Buffalo Wem-1266wp Firmware](https://junglewise.ai/threats/technologies/wem-1266wp-firmware): 5 vulnerabilities - [Buffalo Wrm-D2133hp](https://junglewise.ai/threats/technologies/wrm-d2133hp): 5 vulnerabilities - [Buffalo Wrm-D2133hp Firmware](https://junglewise.ai/threats/technologies/wrm-d2133hp-firmware): 5 vulnerabilities - [Buffalo Wrm-D2133hs](https://junglewise.ai/threats/technologies/wrm-d2133hs): 5 vulnerabilities - [Buffalo Wrm-D2133hs Firmware](https://junglewise.ai/threats/technologies/wrm-d2133hs-firmware): 5 vulnerabilities - [Buffalo Wsr3600be4-Kh](https://junglewise.ai/threats/technologies/wsr3600be4-kh): 5 vulnerabilities - [Buffalo Wsr3600be4-Kh Firmware](https://junglewise.ai/threats/technologies/wsr3600be4-kh-firmware): 5 vulnerabilities - [Buffalo Wsr3600be4p](https://junglewise.ai/threats/technologies/wsr3600be4p): 5 vulnerabilities - [Buffalo Wsr3600be4p Firmware](https://junglewise.ai/threats/technologies/wsr3600be4p-firmware): 5 vulnerabilities - [Buffalo Wtr-M2133hp](https://junglewise.ai/threats/technologies/wtr-m2133hp): 5 vulnerabilities - [Buffalo Wtr-M2133hp Firmware](https://junglewise.ai/threats/technologies/wtr-m2133hp-firmware): 5 vulnerabilities - [Buffalo Wtr-M2133hs](https://junglewise.ai/threats/technologies/wtr-m2133hs): 5 vulnerabilities - [Buffalo Wtr-M2133hs Firmware](https://junglewise.ai/threats/technologies/wtr-m2133hs-firmware): 5 vulnerabilities - [Buffalo Wxr-1750dhp](https://junglewise.ai/threats/technologies/wxr-1750dhp): 5 vulnerabilities - [Buffalo Wxr-1750dhp Firmware](https://junglewise.ai/threats/technologies/wxr-1750dhp-firmware): 5 vulnerabilities - [Buffalo Wxr-1750dhp2](https://junglewise.ai/threats/technologies/wxr-1750dhp2): 5 vulnerabilities - [Buffalo Wxr-1750dhp2 Firmware](https://junglewise.ai/threats/technologies/wxr-1750dhp2-firmware): 5 vulnerabilities - [Buffalo Wxr-1900dhp](https://junglewise.ai/threats/technologies/wxr-1900dhp): 5 vulnerabilities - [Buffalo Wxr-1900dhp Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp-firmware): 5 vulnerabilities - [Buffalo Wxr-1900dhp2](https://junglewise.ai/threats/technologies/wxr-1900dhp2): 5 vulnerabilities - [Buffalo Wxr-1900dhp2 Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp2-firmware): 5 vulnerabilities - [Buffalo Wxr-1900dhp3](https://junglewise.ai/threats/technologies/wxr-1900dhp3): 5 vulnerabilities - [Buffalo Wxr-1900dhp3 Firmware](https://junglewise.ai/threats/technologies/wxr-1900dhp3-firmware): 5 vulnerabilities - [Buffalo Wxr-5950ax12](https://junglewise.ai/threats/technologies/wxr-5950ax12): 5 vulnerabilities - [Buffalo Wxr-5950ax12 Firmware](https://junglewise.ai/threats/technologies/wxr-5950ax12-firmware): 5 vulnerabilities - [Buffalo Wxr-6000ax12b](https://junglewise.ai/threats/technologies/wxr-6000ax12b): 5 vulnerabilities - [Buffalo Wxr-6000ax12b Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12b-firmware): 5 vulnerabilities - [Buffalo Wxr-6000ax12p](https://junglewise.ai/threats/technologies/wxr-6000ax12p): 5 vulnerabilities - [Buffalo Wxr-6000ax12p Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12p-firmware): 5 vulnerabilities - [Buffalo Wxr-6000ax12s](https://junglewise.ai/threats/technologies/wxr-6000ax12s): 5 vulnerabilities - [Buffalo Wxr-6000ax12s Firmware](https://junglewise.ai/threats/technologies/wxr-6000ax12s-firmware): 5 vulnerabilities - [Buffalo Wxr18000be10p](https://junglewise.ai/threats/technologies/wxr18000be10p): 5 vulnerabilities - [Buffalo Wxr18000be10p Firmware](https://junglewise.ai/threats/technologies/wxr18000be10p-firmware): 5 vulnerabilities - [Buffalo Wzr-1166dhp](https://junglewise.ai/threats/technologies/wzr-1166dhp): 5 vulnerabilities - [Buffalo Wzr-1166dhp Firmware](https://junglewise.ai/threats/technologies/wzr-1166dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-1166dhp2](https://junglewise.ai/threats/technologies/wzr-1166dhp2): 5 vulnerabilities - [Buffalo Wzr-1166dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-1166dhp2-firmware): 5 vulnerabilities - [Buffalo Wzr-1750dhp](https://junglewise.ai/threats/technologies/wzr-1750dhp): 5 vulnerabilities - [Buffalo Wzr-1750dhp Firmware](https://junglewise.ai/threats/technologies/wzr-1750dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-1750dhp2](https://junglewise.ai/threats/technologies/wzr-1750dhp2): 5 vulnerabilities - [Buffalo Wzr-1750dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-1750dhp2-firmware): 5 vulnerabilities - [Buffalo Wzr-600dhp](https://junglewise.ai/threats/technologies/wzr-600dhp): 5 vulnerabilities - [Buffalo Wzr-600dhp Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-600dhp2](https://junglewise.ai/threats/technologies/wzr-600dhp2): 5 vulnerabilities - [Buffalo Wzr-600dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp2-firmware): 5 vulnerabilities - [Buffalo Wzr-600dhp3](https://junglewise.ai/threats/technologies/wzr-600dhp3): 5 vulnerabilities - [Buffalo Wzr-600dhp3 Firmware](https://junglewise.ai/threats/technologies/wzr-600dhp3-firmware): 5 vulnerabilities - [Buffalo Wzr-900dhp](https://junglewise.ai/threats/technologies/wzr-900dhp): 5 vulnerabilities - [Buffalo Wzr-900dhp Firmware](https://junglewise.ai/threats/technologies/wzr-900dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-900dhp2](https://junglewise.ai/threats/technologies/wzr-900dhp2): 5 vulnerabilities - [Buffalo Wzr-900dhp2 Firmware](https://junglewise.ai/threats/technologies/wzr-900dhp2-firmware): 5 vulnerabilities - [Buffalo Wzr-S1750dhp](https://junglewise.ai/threats/technologies/wzr-s1750dhp): 5 vulnerabilities - [Buffalo Wzr-S1750dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s1750dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-S600dhp](https://junglewise.ai/threats/technologies/wzr-s600dhp): 5 vulnerabilities - [Buffalo Wzr-S600dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s600dhp-firmware): 5 vulnerabilities - [Buffalo Wzr-S900dhp](https://junglewise.ai/threats/technologies/wzr-s900dhp): 5 vulnerabilities - [Buffalo Wzr-S900dhp Firmware](https://junglewise.ai/threats/technologies/wzr-s900dhp-firmware): 5 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Buffalo vulnerabilities", https://junglewise.ai/threats/vendors/buffalo, 9 November 2026.