Details of VAR-202603-4862

ID

VAR-202603-4862

CVE

CVE-2026-32669

DESCRIPTION

Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

Trust: 1.0

sources: NVD: CVE-2026-32669

AFFECTED PRODUCTS

vendor:	buffalo	model:	vr-u500x	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-ax4r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp	scope:	lt	version:	2.53	Trust: 1.0
vendor:	buffalo	model:	wem-1266wp	scope:	lt	version:	2.87	Trust: 1.0
vendor:	buffalo	model:	fs-s1266	scope:	lt	version:	4.13	Trust: 1.0
vendor:	buffalo	model:	wzr-900dhp2	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wapm-1750d	scope:	lt	version:	1.07	Trust: 1.0
vendor:	buffalo	model:	wxr-1750dhp2	scope:	lt	version:	2.63	Trust: 1.0
vendor:	buffalo	model:	wzr-1750dhp2	scope:	lt	version:	2.33	Trust: 1.0
vendor:	buffalo	model:	wxr-5950ax12	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wsr3600be4-kh	scope:	lt	version:	6.02	Trust: 1.0
vendor:	buffalo	model:	wem-1266	scope:	lt	version:	2.87	Trust: 1.0
vendor:	buffalo	model:	vr-u300w	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-2133tr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-2133r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wrm-d2133hp	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wapm-1266wdpr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-1266wdpra	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr18000be10p	scope:	lt	version:	5.03	Trust: 1.0
vendor:	buffalo	model:	wapm-axetr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp3	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wsr3600be4p	scope:	lt	version:	5.02	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp3	scope:	lt	version:	2.66	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12b	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wcr-1166dhpl	scope:	lt	version:	1.01	Trust: 1.0
vendor:	buffalo	model:	wapm-1266r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12p	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wzr-1166dhp	scope:	lt	version:	2.20	Trust: 1.0
vendor:	buffalo	model:	wtr-m2133hp	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	waps-1266	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-1166dhp2	scope:	lt	version:	2.20	Trust: 1.0
vendor:	buffalo	model:	wzr-1750dhp	scope:	lt	version:	2.32	Trust: 1.0
vendor:	buffalo	model:	wzr-900dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wxr-1750dhp	scope:	lt	version:	2.63	Trust: 1.0
vendor:	buffalo	model:	wapm-ax8r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-s600dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-s1750dhp	scope:	lt	version:	2.34	Trust: 1.0
vendor:	buffalo	model:	fs-m1266	scope:	lt	version:	4.13	Trust: 1.0
vendor:	buffalo	model:	waps-ax4	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12s	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wrm-d2133hs	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wtr-m2133hs	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp2	scope:	lt	version:	2.62	Trust: 1.0
vendor:	buffalo	model:	wzr-s900dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp2	scope:	eq	version:	-	Trust: 1.0

sources: NVD: CVE-2026-32669

CVSS

SEVERITY

CVSSV2

CVSSV3

vultures@jpcert.or.jp:	CVE-2026-32669
value:	HIGH
Trust: 1.0
nvd@nist.gov:	CVE-2026-32669
value:	CRITICAL
Trust: 1.0

vultures@jpcert.or.jp:	CVE-2026-32669
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
nvd@nist.gov:	CVE-2026-32669
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: NVD: CVE-2026-32669 // NVD: CVE-2026-32669

PROBLEMTYPE DATA

problemtype:

CWE-94

Trust: 1.0

sources: NVD: CVE-2026-32669

EXTERNAL IDS

db:	JVN	id:	JVN83788689	Trust: 1.0
db:	NVD	id:	CVE-2026-32669	Trust: 1.0

sources: NVD: CVE-2026-32669

REFERENCES

url:	https://jvn.jp/en/jp/jvn83788689/	Trust: 1.0
url:	https://www.buffalo.jp/news/detail/20260323-01.html	Trust: 1.0

sources: NVD: CVE-2026-32669

SOURCES

db:

NVD

id:

CVE-2026-32669

LAST UPDATE DATE

2026-04-02T23:16:31.944000+00:00

SOURCES UPDATE DATE

db:

NVD

id:

CVE-2026-32669

date:

2026-03-31T19:03:55.393

SOURCES RELEASE DATE

db:

NVD

id:

CVE-2026-32669

date:

2026-03-27T06:16:38.450