{"schema_version":1,"title":"Elecom vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Elecom: 0 in the last 7 days and 3 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-61376, was published on 28 July 2026. 11 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/elecom","json_url":"https://junglewise.ai/threats/vendors/elecom.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/elecom","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":4,"all_time":14,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":12},"latest":[{"cve":"CVE-2026-61376","cvss":7.2,"slug":"cve-2026-61376-elecom-wireless-lan-routers-os-command-injection-in-restore","title":"ELECOM Wireless LAN Routers OS command injection in Restore Settings","severity":"high","exploited":false,"published_at":"2026-07-28T09:16:42.553+00:00","url":"https://junglewise.ai/threats/cve-2026-61376-elecom-wireless-lan-routers-os-command-injection-in-restore"},{"cve":"CVE-2026-59764","cvss":7.2,"slug":"cve-2026-59764-elecom-wireless-routers-os-command-injection-in-webui","title":"ELECOM Wireless Routers OS command injection in WebUI","severity":"high","exploited":false,"published_at":"2026-07-28T09:16:42.417+00:00","url":"https://junglewise.ai/threats/cve-2026-59764-elecom-wireless-routers-os-command-injection-in-webui"},{"cve":"CVE-2026-44387","cvss":5.2,"slug":"cve-2026-44387-elecom-wireless-lan-routers-reflected-xss-in-webui","title":"ELECOM Wireless LAN Routers reflected XSS in WebUI","severity":"medium","exploited":false,"published_at":"2026-07-28T09:16:42.247+00:00","url":"https://junglewise.ai/threats/cve-2026-44387-elecom-wireless-lan-routers-reflected-xss-in-webui"},{"cve":"CVE-2026-42961","cvss":4.3,"slug":"cve-2026-42961-elecom-wireless-lan-access-points-csrf-in-management-interface","title":"ELECOM Wireless LAN Access Points CSRF in management interface","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:44.337+00:00","url":"https://junglewise.ai/threats/cve-2026-42961-elecom-wireless-lan-access-points-csrf-in-management-interface"},{"cve":"CVE-2026-42950","cvss":4.3,"slug":"cve-2026-42950-elecom-wireless-lan-access-point-improper-validation-of-language","title":"ELECOM Wireless LAN Access Point improper validation of language parameter","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:44.2+00:00","url":"https://junglewise.ai/threats/cve-2026-42950-elecom-wireless-lan-access-point-improper-validation-of-language"},{"cve":"CVE-2026-42948","cvss":4.8,"slug":"cve-2026-42948-elecom-wireless-lan-access-point-stored-xss-in-hostname-parameter","title":"ELECOM Wireless LAN Access Point stored XSS in hostname parameter","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:44.063+00:00","url":"https://junglewise.ai/threats/cve-2026-42948-elecom-wireless-lan-access-point-stored-xss-in-hostname-parameter"},{"cve":"CVE-2026-42062","cvss":9.8,"slug":"cve-2026-42062-elecom-wireless-lan-devices-os-command-injection-in-username","title":"ELECOM Wireless LAN Devices OS command injection in username parameter","severity":"critical","exploited":false,"published_at":"2026-05-13T13:16:43.57+00:00","url":"https://junglewise.ai/threats/cve-2026-42062-elecom-wireless-lan-devices-os-command-injection-in-username"},{"cve":"CVE-2026-40621","cvss":9.8,"slug":"cve-2026-40621-elecom-wireless-lan-devices-authentication-bypass-in-web","title":"ELECOM Wireless LAN devices authentication bypass in web interface","severity":"critical","exploited":false,"published_at":"2026-05-13T13:16:42.75+00:00","url":"https://junglewise.ai/threats/cve-2026-40621-elecom-wireless-lan-devices-authentication-bypass-in-web"},{"cve":"CVE-2026-35506","cvss":7.2,"slug":"cve-2026-35506-elecom-wireless-lan-access-points-os-command-injection-in-ping-ip","title":"ELECOM Wireless LAN Access Points OS command injection in ping_ip_addr","severity":"high","exploited":false,"published_at":"2026-05-13T13:16:40.88+00:00","url":"https://junglewise.ai/threats/cve-2026-35506-elecom-wireless-lan-access-points-os-command-injection-in-ping-ip"},{"cve":"CVE-2026-25107","cvss":6.5,"slug":"cve-2026-25107-elecom-wireless-lan-devices-hard-coded-key-in-configuration","title":"ELECOM Wireless LAN devices hard-coded key in configuration backups","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:37.16+00:00","url":"https://junglewise.ai/threats/cve-2026-25107-elecom-wireless-lan-devices-hard-coded-key-in-configuration"},{"cve":"CVE-2026-22550","cvss":8.8,"slug":"cve-2026-22550-elecom-wireless-lan-products-os-command-injection","title":"ELECOM Wireless LAN products OS command injection","severity":"high","exploited":false,"published_at":"2026-02-03T07:16:12.713+00:00","url":"https://junglewise.ai/threats/cve-2026-22550-elecom-wireless-lan-products-os-command-injection"},{"cve":"CVE-2026-20704","cvss":4.3,"slug":"cve-2026-20704-elecom-wireless-lan-products-csrf-vulnerability","title":"ELECOM Wireless LAN products CSRF vulnerability","severity":"medium","exploited":false,"published_at":"2026-02-03T07:16:12.503+00:00","url":"https://junglewise.ai/threats/cve-2026-20704-elecom-wireless-lan-products-csrf-vulnerability"},{"cve":"CVE-2024-34577","cvss":6.1,"slug":"cve-2024-34577-elecom-wrc-x3000-series-xss-in-easysetup-cgi","title":"Elecom WRC-X3000 Series XSS in easysetup.cgi","severity":"medium","exploited":false,"published_at":"2024-08-30T07:15:11.66+00:00","url":"https://junglewise.ai/threats/cve-2024-34577-elecom-wrc-x3000-series-xss-in-easysetup-cgi"},{"cve":"CVE-2024-29225","cvss":4.3,"slug":"cve-2024-29225-elecom-wireless-lan-routers-sensitive-information-disclosure-via","title":"ELECOM wireless LAN routers sensitive information disclosure via configuration file","severity":"medium","exploited":false,"published_at":"2024-04-04T00:15:07.2+00:00","url":"https://junglewise.ai/threats/cve-2024-29225-elecom-wireless-lan-routers-sensitive-information-disclosure-via"}],"vendor":{"hub":true,"name":"Elecom","slug":"elecom","homepage":"https://www.elecom.co.jp/","description":"A Japanese electronics company that produces computer peripherals and networking equipment.","url":"https://junglewise.ai/threats/vendors/elecom"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-42062","cvss":9.8,"slug":"cve-2026-42062-elecom-wireless-lan-devices-os-command-injection-in-username","title":"ELECOM Wireless LAN Devices OS command injection in username parameter","severity":"critical","exploited":false,"published_at":"2026-05-13T13:16:43.57+00:00","url":"https://junglewise.ai/threats/cve-2026-42062-elecom-wireless-lan-devices-os-command-injection-in-username"},{"cve":"CVE-2026-40621","cvss":9.8,"slug":"cve-2026-40621-elecom-wireless-lan-devices-authentication-bypass-in-web","title":"ELECOM Wireless LAN devices authentication bypass in web interface","severity":"critical","exploited":false,"published_at":"2026-05-13T13:16:42.75+00:00","url":"https://junglewise.ai/threats/cve-2026-40621-elecom-wireless-lan-devices-authentication-bypass-in-web"},{"cve":"CVE-2026-22550","cvss":8.8,"slug":"cve-2026-22550-elecom-wireless-lan-products-os-command-injection","title":"ELECOM Wireless LAN products OS command injection","severity":"high","exploited":false,"published_at":"2026-02-03T07:16:12.713+00:00","url":"https://junglewise.ai/threats/cve-2026-22550-elecom-wireless-lan-products-os-command-injection"},{"cve":"CVE-2026-61376","cvss":7.2,"slug":"cve-2026-61376-elecom-wireless-lan-routers-os-command-injection-in-restore","title":"ELECOM Wireless LAN Routers OS command injection in Restore Settings","severity":"high","exploited":false,"published_at":"2026-07-28T09:16:42.553+00:00","url":"https://junglewise.ai/threats/cve-2026-61376-elecom-wireless-lan-routers-os-command-injection-in-restore"},{"cve":"CVE-2026-59764","cvss":7.2,"slug":"cve-2026-59764-elecom-wireless-routers-os-command-injection-in-webui","title":"ELECOM Wireless Routers OS command injection in WebUI","severity":"high","exploited":false,"published_at":"2026-07-28T09:16:42.417+00:00","url":"https://junglewise.ai/threats/cve-2026-59764-elecom-wireless-routers-os-command-injection-in-webui"},{"cve":"CVE-2026-35506","cvss":7.2,"slug":"cve-2026-35506-elecom-wireless-lan-access-points-os-command-injection-in-ping-ip","title":"ELECOM Wireless LAN Access Points OS command injection in ping_ip_addr","severity":"high","exploited":false,"published_at":"2026-05-13T13:16:40.88+00:00","url":"https://junglewise.ai/threats/cve-2026-35506-elecom-wireless-lan-access-points-os-command-injection-in-ping-ip"},{"cve":"CVE-2026-25107","cvss":6.5,"slug":"cve-2026-25107-elecom-wireless-lan-devices-hard-coded-key-in-configuration","title":"ELECOM Wireless LAN devices hard-coded key in configuration backups","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:37.16+00:00","url":"https://junglewise.ai/threats/cve-2026-25107-elecom-wireless-lan-devices-hard-coded-key-in-configuration"},{"cve":"CVE-2024-34577","cvss":6.1,"slug":"cve-2024-34577-elecom-wrc-x3000-series-xss-in-easysetup-cgi","title":"Elecom WRC-X3000 Series XSS in easysetup.cgi","severity":"medium","exploited":false,"published_at":"2024-08-30T07:15:11.66+00:00","url":"https://junglewise.ai/threats/cve-2024-34577-elecom-wrc-x3000-series-xss-in-easysetup-cgi"},{"cve":"CVE-2026-44387","cvss":5.2,"slug":"cve-2026-44387-elecom-wireless-lan-routers-reflected-xss-in-webui","title":"ELECOM Wireless LAN Routers reflected XSS in WebUI","severity":"medium","exploited":false,"published_at":"2026-07-28T09:16:42.247+00:00","url":"https://junglewise.ai/threats/cve-2026-44387-elecom-wireless-lan-routers-reflected-xss-in-webui"},{"cve":"CVE-2026-42948","cvss":4.8,"slug":"cve-2026-42948-elecom-wireless-lan-access-point-stored-xss-in-hostname-parameter","title":"ELECOM Wireless LAN Access Point stored XSS in hostname parameter","severity":"medium","exploited":false,"published_at":"2026-05-13T13:16:44.063+00:00","url":"https://junglewise.ai/threats/cve-2026-42948-elecom-wireless-lan-access-point-stored-xss-in-hostname-parameter"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Elecom WAB-BE187-M","slug":"wab-be187-m","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wab-be187-m"},{"name":"Elecom WAB-BE36-M","slug":"wab-be36-m","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wab-be36-m"},{"name":"Elecom WAB-BE36-S","slug":"wab-be36-s","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wab-be36-s"},{"name":"Elecom WAB-BE72-M","slug":"wab-be72-m","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wab-be72-m"},{"name":"Elecom WRC-BE65QSD-B","slug":"wrc-be65qsd-b","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-be65qsd-b"},{"name":"Elecom WRC-BE72XSD-B","slug":"wrc-be72xsd-b","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-be72xsd-b"},{"name":"Elecom WRC-BE72XSD-BA","slug":"wrc-be72xsd-ba","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-be72xsd-ba"},{"name":"Elecom WRC-W702-B","slug":"wrc-w702-b","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-w702-b"},{"name":"Elecom Wrc-X3000gs2-B","slug":"wrc-x3000gs2-b","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-x3000gs2-b"},{"name":"Elecom Wrc-X3000gs2-W","slug":"wrc-x3000gs2-w","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-x3000gs2-w"},{"name":"Elecom Wrc-X3000gs2a-B","slug":"wrc-x3000gs2a-b","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wrc-x3000gs2a-b"}]}