Back to the CVE list
CVE-2026-27650

OS command injection in Buffalo Wcr 1166dhpl Firmware

CVSS score

9.8

EPSS probability

%0.9

Risk score

0.1

Published

7 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-27650 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-27650 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1buffalowcr-1166dhpl firmware View
2buffalowcr-1166dhpl View
3buffalowsr3600be4-kh firmware View
4buffalowsr3600be4-kh View
5buffalowsr3600be4p firmware View
6buffalowsr3600be4p View
7buffalowxr-1750dhp firmware View
8buffalowxr-1750dhp View
9buffalowxr-1750dhp2 firmware View
10buffalowxr-1750dhp2 View
11buffalowxr18000be10p firmware View
12buffalowxr18000be10p View
13buffalowxr-1900dhp firmware View
14buffalowxr-1900dhp View
15buffalowxr-1900dhp2 firmware View
16buffalowxr-1900dhp2 View
17buffalowxr-1900dhp3 firmware View
18buffalowxr-1900dhp3 View
19buffalowxr-5950ax12 firmware View
20buffalowxr-5950ax12 View
21buffalowxr-6000ax12b firmware View
22buffalowxr-6000ax12b View
23buffalowxr-6000ax12p firmware View
24buffalowxr-6000ax12p View
25buffalowxr-6000ax12s firmware View
26buffalowxr-6000ax12s View
27buffalowzr-1166dhp firmware View
28buffalowzr-1166dhp View
29buffalowzr-1166dhp2 firmware View
30buffalowzr-1166dhp2 View
31buffalowzr-1750dhp firmware View
32buffalowzr-1750dhp View
33buffalowzr-1750dhp2 firmware View
34buffalowzr-1750dhp2 View
35buffalowzr-s1750dhp firmware View
36buffalowzr-s1750dhp View
37buffalowrm-d2133hp firmware View
38buffalowrm-d2133hp View
39buffalowrm-d2133hs firmware View
40buffalowrm-d2133hs View
41buffalowtr-m2133hp firmware View
42buffalowtr-m2133hp View
43buffalowtr-m2133hs firmware View
44buffalowtr-m2133hs View
45buffalowem-1266 firmware View
46buffalowem-1266 View
47buffalowem-1266wp firmware View
48buffalowem-1266wp View
49buffalovr-u300w firmware View
50buffalovr-u300w View
51buffalovr-u500x firmware View
52buffalovr-u500x View
53buffalowapm-1266r firmware View
54buffalowapm-1266r View
55buffalowapm-1266wdpr firmware View
56buffalowapm-1266wdpr View
57buffalowapm-1266wdpra firmware View
58buffalowapm-1266wdpra View
59buffalowapm-1750d firmware View
60buffalowapm-1750d View
61buffalowapm-2133r firmware View
62buffalowapm-2133r View
63buffalowapm-2133tr firmware View
64buffalowapm-2133tr View
65buffalowapm-ax4r firmware View
66buffalowapm-ax4r View
67buffalowapm-ax8r firmware View
68buffalowapm-ax8r View
69buffalowapm-axetr firmware View
70buffalowapm-axetr View
71buffalowaps-1266 firmware View
72buffalowaps-1266 View
73buffalowaps-ax4 firmware View
74buffalowaps-ax4 View
75buffalofs-m1266 firmware View
76buffalofs-m1266 View
77buffalofs-s1266 firmware View
78buffalofs-s1266 View
79buffalowzr-600dhp firmware View
80buffalowzr-600dhp View
81buffalowzr-600dhp2 firmware View
82buffalowzr-600dhp2 View
83buffalowzr-600dhp3 firmware View
84buffalowzr-600dhp3 View
85buffalowzr-900dhp firmware View
86buffalowzr-900dhp View
87buffalowzr-900dhp2 firmware View
88buffalowzr-900dhp2 View
89buffalowzr-s600dhp firmware View
90buffalowzr-s600dhp View
91buffalowzr-s900dhp firmware View
92buffalowzr-s900dhp View
Total affected vendors: 1|Products: 92

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
9.8CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
8.8CVSS V30HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HNVD
8.6CVSS V40HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-27650 is associated with the following CWEs:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-27650 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://jvn.jp/en/jp/JVN83788689/nvdhttps://www.buffalo.jp/news/detail/20260323-01.htmlvendor-advisory

CVSS Vector Radar Chart

9.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

B
buffalo logo
buffalo

Weakness Type (CWE & CAPEC)

CWE-78

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-27650"
CVE-2026-27650 · OS command injection in Buffalo Wcr…