What’s Vulnerable › Vulnerabilities

CVE-2026-6059

• Severity: medium (CVSS 4.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-25 · updated 2026-07-23
• Weakness: CWE-79

Description

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.

Affected products

• NEC Platforms, Ltd. Aterm 19000T12BE: before Ver. 1.1.0
• NEC Platforms, Ltd. Aterm GX621A1: before Ver. 3.2.2
• NEC Platforms, Ltd. Aterm SH621A1: before Ver. 3.2.2
• NEC Platforms, Ltd. Aterm WX11000T12: before Ver. 1.4.0
• NEC Platforms, Ltd. Aterm WX1800HP: before Ver. 3.2.2
• NEC Platforms, Ltd. Aterm WX3000HP2: before Ver. 1.3.2
• NEC Platforms, Ltd. Aterm WX4200D5: before Ver. 1.3.5
• NEC Platforms, Ltd. Aterm WX5400HP: before Ver. 2.1.0
• NEC Platforms, Ltd. Aterm WX7800T8: before Ver. 1.5.1

References

• https://jpn.nec.com/security-info/secinfo/nv26-002_en.html

Get alerted when CVE-2026-6059 or the next vulnerability affects your stack