https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-24465.htmlhttps://patchthecve.com/cve/CVE-2026-24465.htmlWed, 17 Jun 2026 10:23:06 +0000CRITICAL 9.8: Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.https://patchthecve.com/cve/CVE-2026-24449.htmlhttps://patchthecve.com/cve/CVE-2026-24449.htmlWed, 17 Jun 2026 10:23:05 +0000MEDIUM 4.6: For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.https://patchthecve.com/cve/CVE-2026-22550.htmlhttps://patchthecve.com/cve/CVE-2026-22550.htmlWed, 17 Jun 2026 10:20:04 +0000HIGH 8.8: OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.https://patchthecve.com/cve/CVE-2024-43689.htmlhttps://patchthecve.com/cve/CVE-2024-43689.htmlWed, 17 Jun 2026 07:51:32 +0000CRITICAL 9.8: Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.https://patchthecve.com/cve/CVE-2024-42412.htmlhttps://patchthecve.com/cve/CVE-2024-42412.htmlWed, 17 Jun 2026 07:49:24 +0000MEDIUM 6.1: Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.https://patchthecve.com/cve/CVE-2024-39300.htmlhttps://patchthecve.com/cve/CVE-2024-39300.htmlWed, 17 Jun 2026 07:41:40 +0000LOW 3.7: Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings.https://patchthecve.com/cve/CVE-2024-34577.htmlhttps://patchthecve.com/cve/CVE-2024-34577.htmlWed, 17 Jun 2026 07:33:39 +0000MEDIUM 6.1: Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web brohttps://patchthecve.com/cve/CVE-2024-40883.htmlhttps://patchthecve.com/cve/CVE-2024-40883.htmlWed, 17 Jun 2026 07:46:47 +0000HIGH 8.8: Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.