CVE-2026-33366
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Analyzed - vultures@jpcert.or.jp
- Published
- 2026-03-27
- Last modified
- 2026-10-26
- Weaknesses
- CWE-306
Affected products
- Fs-m1266 Firmware (Buffalo)
- Fs-s1266 Firmware (Buffalo)
- Vr-u300w Firmware (Buffalo)
- Vr-u500x Firmware (Buffalo)
- Wapm-1266r Firmware (Buffalo)
- Wapm-1266wdpr Firmware (Buffalo)
- Wapm-1266wdpra Firmware (Buffalo)
- Wapm-1750d Firmware (Buffalo)
- Wapm-2133r Firmware (Buffalo)
- Wapm-2133tr Firmware (Buffalo)
- Wapm-ax4r Firmware (Buffalo)
- Wapm-ax8r Firmware (Buffalo)
- Wapm-axetr Firmware (Buffalo)
- Waps-1266 Firmware (Buffalo)
- Waps-ax4 Firmware (Buffalo)
- Wcr-1166dhpl Firmware (Buffalo)
- Wem-1266 Firmware (Buffalo)
- Wem-1266wp Firmware (Buffalo)
- Wrm-d2133hp Firmware (Buffalo)
- Wrm-d2133hs Firmware (Buffalo)
- Wsr3600be4-kh Firmware (Buffalo)
- Wsr3600be4p Firmware (Buffalo)
- Wtr-m2133hp Firmware (Buffalo)
- Wtr-m2133hs Firmware (Buffalo)
- Wxr-1750dhp2 Firmware (Buffalo)
- Wxr-1750dhp Firmware (Buffalo)
- Wxr-1900dhp2 Firmware (Buffalo)
- Wxr-1900dhp3 Firmware (Buffalo)
- Wxr-1900dhp Firmware (Buffalo)
- Wxr-5950ax12 Firmware (Buffalo)
- Wxr-6000ax12b Firmware (Buffalo)
- Wxr-6000ax12p Firmware (Buffalo)
- Wxr-6000ax12s Firmware (Buffalo)
- Wxr18000be10p Firmware (Buffalo)
- Wzr-1166dhp2 Firmware (Buffalo)
- Wzr-1166dhp Firmware (Buffalo)
- Wzr-1750dhp2 Firmware (Buffalo)
- Wzr-1750dhp Firmware (Buffalo)
- Wzr-600dhp2 Firmware (Buffalo)
- Wzr-600dhp3 Firmware (Buffalo)
- Wzr-600dhp Firmware (Buffalo)
- Wzr-900dhp2 Firmware (Buffalo)
- Wzr-900dhp Firmware (Buffalo)
- Wzr-s1750dhp Firmware (Buffalo)
- Wzr-s600dhp Firmware (Buffalo)
- Wzr-s900dhp Firmware (Buffalo)
- Buffalo Wi-fi Router Products (Buffalo Inc.)
References
- https://www.buffalo.jp/news/detail/20260323-01.html
- https://jvn.jp/en/jp/JVN83788689/
