CVE-2026-32669 Details
Description
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
A code injection vulnerability has been identified in multiple BUFFALO Wi-Fi router products. This vulnerability allows for the execution of arbitrary code on the affected devices. The issue arises from a dependency on a vulnerable third-party component, mini_httpd, which has its own known vulnerability (CVE-2015-1548).
Users are advised to update the router's firmware to the latest version. Instructions for downloading the update are available on the BUFFALO support website. For models no longer supported, it is recommended to discontinue use and consider transitioning to a new product.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/en/jp/JVN83788689/ | [email protected] | Third Party Advisory |
| https://www.buffalo.jp/news/detail/20260323-01.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| buffalo wcr-1166dhpl firmware | < 1.01 |
CPE
Remediation
| |
| buffalo wcr-1166dhpl | All versions |
CPE
Remediation
| |
| buffalo wsr3600be4-kh firmware | < 6.02 |
CPE
Remediation
| |
| buffalo wsr3600be4-kh | All versions |
CPE
Remediation
| |
| buffalo wsr3600be4p firmware | < 5.02 |
CPE
Remediation
| |
| buffalo wsr3600be4p | All versions |
CPE
Remediation
| |
| buffalo wxr-1750dhp firmware | < 2.63 |
CPE
Remediation
| |
| buffalo wxr-1750dhp | All versions |
CPE
Remediation
| |
| buffalo wxr-1750dhp2 firmware | < 2.63 |
CPE
Remediation
| |
| buffalo wxr-1750dhp2 | All versions |
CPE
Remediation
| |
| buffalo wxr18000be10p firmware | < 5.03 |
CPE
Remediation
| |
| buffalo wxr18000be10p | All versions |
CPE
Remediation
| |
| buffalo wxr-1900dhp firmware | < 2.53 |
CPE
Remediation
| |
| buffalo wxr-1900dhp | All versions |
CPE
Remediation
| |
| buffalo wxr-1900dhp2 firmware | < 2.62 |
CPE
Remediation
| |
| buffalo wxr-1900dhp2 | All versions |
CPE
Remediation
| |
| buffalo wxr-1900dhp3 firmware | < 2.66 |
CPE
Remediation
| |
| buffalo wxr-1900dhp3 | All versions |
CPE
Remediation
| |
| buffalo wxr-5950ax12 firmware | < 3.57 |
CPE
Remediation
| |
| buffalo wxr-5950ax12 | All versions |
CPE
Remediation
| |
| buffalo wxr-6000ax12b firmware | < 3.57 |
CPE
Remediation
| |
| buffalo wxr-6000ax12b | All versions |
CPE
Remediation
| |
| buffalo wxr-6000ax12p firmware | < 3.57 |
CPE
Remediation
| |
| buffalo wxr-6000ax12p | All versions |
CPE
Remediation
| |
| buffalo wxr-6000ax12s firmware | < 3.57 |
CPE
Remediation
| |
| buffalo wxr-6000ax12s | All versions |
CPE
Remediation
| |
| buffalo wzr-1166dhp firmware | < 2.20 |
CPE
Remediation
| |
| buffalo wzr-1166dhp | All versions |
CPE
Remediation
| |
| buffalo wzr-1166dhp2 firmware | < 2.20 |
CPE
Remediation
| |
| buffalo wzr-1166dhp2 | All versions |
CPE
Remediation
| |
| buffalo wzr-1750dhp firmware | < 2.32 |
CPE
Remediation
| |
| buffalo wzr-1750dhp | All versions |
CPE
Remediation
| |
| buffalo wzr-1750dhp2 firmware | < 2.33 |
CPE
Remediation
| |
| buffalo wzr-1750dhp2 | All versions |
CPE
Remediation
| |
| buffalo wzr-s1750dhp firmware | < 2.34 |
CPE
Remediation
| |
| buffalo wzr-s1750dhp | All versions |
CPE
Remediation
| |
| buffalo wrm-d2133hp firmware | < 3.01 |
CPE
Remediation
| |
| buffalo wrm-d2133hp | All versions |
CPE
Remediation
| |
| buffalo wrm-d2133hs firmware | < 3.01 |
CPE
Remediation
| |
| buffalo wrm-d2133hs | All versions |
CPE
Remediation
| |
| buffalo wtr-m2133hp firmware | < 3.01 |
CPE
Remediation
| |
| buffalo wtr-m2133hp | All versions |
CPE
Remediation
| |
| buffalo wtr-m2133hs firmware | < 3.01 |
CPE
Remediation
| |
| buffalo wtr-m2133hs | All versions |
CPE
Remediation
| |
| buffalo wem-1266 firmware | < 2.87 |
CPE
Remediation
| |
| buffalo wem-1266 | All versions |
CPE
Remediation
| |
| buffalo wem-1266wp firmware | < 2.87 |
CPE
Remediation
| |
| buffalo wem-1266wp | All versions |
CPE
Remediation
| |
| buffalo vr-u300w firmware | < 1.42 |
CPE
Remediation
| |
| buffalo vr-u300w | All versions |
CPE
Remediation
| |
| buffalo vr-u500x firmware | < 1.42 |
CPE
Remediation
| |
| buffalo vr-u500x | All versions |
CPE
Remediation
| |
| buffalo wapm-1266r firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-1266r | All versions |
CPE
Remediation
| |
| buffalo wapm-1266wdpr firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-1266wdpr | All versions |
CPE
Remediation
| |
| buffalo wapm-1266wdpra firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-1266wdpra | All versions |
CPE
Remediation
| |
| buffalo wapm-1750d firmware | < 1.07 |
CPE
Remediation
| |
| buffalo wapm-1750d | All versions |
CPE
Remediation
| |
| buffalo wapm-2133r firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-2133r | All versions |
CPE
Remediation
| |
| buffalo wapm-2133tr firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-2133tr | All versions |
CPE
Remediation
| |
| buffalo wapm-ax4r firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-ax4r | All versions |
CPE
Remediation
| |
| buffalo wapm-ax8r firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-ax8r | All versions |
CPE
Remediation
| |
| buffalo wapm-axetr firmware | < 1.42 |
CPE
Remediation
| |
| buffalo wapm-axetr | All versions |
CPE
Remediation
| |
| buffalo waps-1266 firmware | < 1.42 |
CPE
Remediation
| |
| buffalo waps-1266 | All versions |
CPE
Remediation
| |
| buffalo waps-ax4 firmware | < 1.42 |
CPE
Remediation
| |
| buffalo waps-ax4 | All versions |
CPE
Remediation
| |
| buffalo fs-m1266 firmware | < 4.13 |
CPE
Remediation
| |
| buffalo fs-m1266 | All versions |
CPE
Remediation
| |
| buffalo fs-s1266 firmware | < 4.13 |
CPE
Remediation
| |
| buffalo fs-s1266 | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp2 firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp2 | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp3 firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-600dhp3 | All versions |
CPE
Remediation
| |
| buffalo wzr-900dhp firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-900dhp | All versions |
CPE
Remediation
| |
| buffalo wzr-900dhp2 firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-900dhp2 | All versions |
CPE
Remediation
| |
| buffalo wzr-s600dhp firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-s600dhp | All versions |
CPE
Remediation
| |
| buffalo wzr-s900dhp firmware | All versions |
CPE
Remediation
| |
| buffalo wzr-s900dhp | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 31, 2026 | Initial Analysis | [email protected] |
| Mar 27, 2026 | New CVE Received | [email protected] |