# Nec vulnerabilities Source: https://junglewise.ai/threats/vendors/nec Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/nec.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Nec: 3 in the last 7 days and 4 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113364, was published on 9 November 2026. Nothing was published in the last eight weeks. 19 technologies have a page of their own. ## Counts - Last 7 days: 3 - Last 30 days: 3 - Last 90 days: 4 - All time: 11 (3 critical, 0 exploited in the wild) ## About Nec Japanese multinational information technology and electronics corporation. ## Latest Nec vulnerabilities - [CVE-2026-113364: NEC WebSAM WinShare buffer overflow in data receiving](https://junglewise.ai/threats/cve-2026-113364-buffer-overflow-in-the-data-receiving-process-in-nec-corporation) (info, published 9 Nov 2026) - [CVE-2026-113363: NEC WebSAM WinShare remote code execution in network communication processing](https://junglewise.ai/threats/cve-2026-113363-improper-input-validation-in-the-network-communication) (info, published 9 Nov 2026) - [CVE-2026-113362: NEC WebSAM Winshare improper access control in installation folder](https://junglewise.ai/threats/cve-2026-113362-improper-access-control-in-the-program-installation-folder-in) (info, published 9 Nov 2026) - [CVE-2026-16876: NEC UNIVERGE IX-R/IX-V WebGUI authentication bypass](https://junglewise.ai/threats/cve-2026-16876-nec-univerge-ix-r-ix-v-webgui-authentication-bypass) (info, published 7 Sep 2026) - [CVE-2026-8652: NEC Aterm OS command injection in web console](https://junglewise.ai/threats/cve-2026-8652-nec-aterm-os-command-injection-in-web-console) (info, CVSS 8.5, published 25 May 2026) - [CVE-2026-6059: NEC Aterm Cross-Site Scripting in web management interface](https://junglewise.ai/threats/cve-2026-6059-nec-aterm-cross-site-scripting-in-web-management-interface) (info, CVSS 4.8, published 25 May 2026) - [CVE-2026-4622: OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands…](https://junglewise.ai/threats/cve-2026-4622-os-command-injection-vulnerability-in-nec-platforms-ltd-aterm) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4621: Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.](https://junglewise.ai/threats/cve-2026-4621-hidden-functionality-vulnerability-in-nec-platforms-ltd-aterm) (medium, CVSS 5.6, published 27 Mar 2026) - [CVE-2026-4620: OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands…](https://junglewise.ai/threats/cve-2026-4620-os-command-injection-vulnerability-in-nec-platforms-ltd-aterm) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4619: Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.](https://junglewise.ai/threats/cve-2026-4619-path-traversal-vulnerability-in-nec-platforms-ltd-aterm-series) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4309: Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device…](https://junglewise.ai/threats/cve-2026-4309-missing-authorization-vulnerability-in-nec-platforms-ltd-aterm) (medium, CVSS 6.5, published 27 Mar 2026) ## Most severe Nec vulnerabilities - [CVE-2026-4620: OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands…](https://junglewise.ai/threats/cve-2026-4620-os-command-injection-vulnerability-in-nec-platforms-ltd-aterm) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4622: OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands…](https://junglewise.ai/threats/cve-2026-4622-os-command-injection-vulnerability-in-nec-platforms-ltd-aterm) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4619: Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.](https://junglewise.ai/threats/cve-2026-4619-path-traversal-vulnerability-in-nec-platforms-ltd-aterm-series) (critical, CVSS 9.8, published 27 Mar 2026) - [CVE-2026-4309: Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device…](https://junglewise.ai/threats/cve-2026-4309-missing-authorization-vulnerability-in-nec-platforms-ltd-aterm) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-4621: Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.](https://junglewise.ai/threats/cve-2026-4621-hidden-functionality-vulnerability-in-nec-platforms-ltd-aterm) (medium, CVSS 5.6, published 27 Mar 2026) - [CVE-2026-8652: NEC Aterm OS command injection in web console](https://junglewise.ai/threats/cve-2026-8652-nec-aterm-os-command-injection-in-web-console) (info, CVSS 8.5, published 25 May 2026) - [CVE-2026-6059: NEC Aterm Cross-Site Scripting in web management interface](https://junglewise.ai/threats/cve-2026-6059-nec-aterm-cross-site-scripting-in-web-management-interface) (info, CVSS 4.8, published 25 May 2026) - [CVE-2026-16876: NEC UNIVERGE IX-R/IX-V WebGUI authentication bypass](https://junglewise.ai/threats/cve-2026-16876-nec-univerge-ix-r-ix-v-webgui-authentication-bypass) (info, published 7 Sep 2026) - [CVE-2026-113364: NEC WebSAM WinShare buffer overflow in data receiving](https://junglewise.ai/threats/cve-2026-113364-buffer-overflow-in-the-data-receiving-process-in-nec-corporation) (info, published 9 Nov 2026) - [CVE-2026-113363: NEC WebSAM WinShare remote code execution in network communication processing](https://junglewise.ai/threats/cve-2026-113363-improper-input-validation-in-the-network-communication) (info, published 9 Nov 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 3 | 0 | 0 | ## Nec technologies - [Nec Aterm Wx3600hp](https://junglewise.ai/threats/technologies/aterm-wx3600hp): 4 vulnerabilities - [Nec Aterm Wx3600hp Firmware](https://junglewise.ai/threats/technologies/aterm-wx3600hp-firmware): 4 vulnerabilities - [Nec Aterm Wf1200cr](https://junglewise.ai/threats/technologies/aterm-wf1200cr): 3 vulnerabilities - [Nec Aterm Wf1200cr Firmware](https://junglewise.ai/threats/technologies/aterm-wf1200cr-firmware): 3 vulnerabilities - [Nec Aterm Wg1200cr](https://junglewise.ai/threats/technologies/aterm-wg1200cr): 3 vulnerabilities - [Nec Aterm Wg1200cr Firmware](https://junglewise.ai/threats/technologies/aterm-wg1200cr-firmware): 3 vulnerabilities - [Nec Aterm Wg2600hm4](https://junglewise.ai/threats/technologies/aterm-wg2600hm4): 3 vulnerabilities - [Nec Aterm Wg2600hm4 Firmware](https://junglewise.ai/threats/technologies/aterm-wg2600hm4-firmware): 3 vulnerabilities - [Nec Aterm Wg2600hp4](https://junglewise.ai/threats/technologies/aterm-wg2600hp4): 3 vulnerabilities - [Nec Aterm Wg2600hp4 Firmware](https://junglewise.ai/threats/technologies/aterm-wg2600hp4-firmware): 3 vulnerabilities - [Nec Aterm Wg2600hs](https://junglewise.ai/threats/technologies/aterm-wg2600hs): 3 vulnerabilities - [Nec Aterm Wg2600hs Firmware](https://junglewise.ai/threats/technologies/aterm-wg2600hs-firmware): 3 vulnerabilities - [Nec Aterm Wg2600hs2](https://junglewise.ai/threats/technologies/aterm-wg2600hs2): 3 vulnerabilities - [Nec Aterm Wg2600hs2 Firmware](https://junglewise.ai/threats/technologies/aterm-wg2600hs2-firmware): 3 vulnerabilities - [Nec Aterm Wx1500hp](https://junglewise.ai/threats/technologies/aterm-wx1500hp): 3 vulnerabilities - [Nec Aterm Wx1500hp Firmware](https://junglewise.ai/threats/technologies/aterm-wx1500hp-firmware): 3 vulnerabilities - [Nec Aterm Wx3000hp](https://junglewise.ai/threats/technologies/aterm-wx3000hp): 3 vulnerabilities - [Nec Aterm Wx3000hp Firmware](https://junglewise.ai/threats/technologies/aterm-wx3000hp-firmware): 3 vulnerabilities - [Nec WebSAM Winshare](https://junglewise.ai/threats/technologies/websam-winshare): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Nec vulnerabilities", https://junglewise.ai/threats/vendors/nec, 10 November 2026.