What’s Vulnerable › Vulnerabilities

CVE-2026-44387

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-28 · updated 2026-07-28
• Weakness: CWE-79

Description

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

• ELECOM CO.,LTD. WAB-I1750-PS: through v2.0.5
• ELECOM CO.,LTD. WAB-M1775-PS: through v2.1.9
• ELECOM CO.,LTD. WAB-M2133: through v2.0.5
• ELECOM CO.,LTD. WAB-S1167-PS: through v2.0.5
• ELECOM CO.,LTD. WAB-S1775: through v2.1.9

References

• https://jvn.jp/en/jp/JVN56870912/
• https://www.elecom.co.jp/news/security/20260728-01/

Get alerted when CVE-2026-44387 or the next vulnerability affects your stack