nec vulnerabilities

Recent CVEs affecting nec products. 5 tracked.

nec has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-03-27. Highest priority: CVE-2026-4620 (score 55/100).

• CVE-2026-4619 CRITICAL 9.8 UPGRADE Path Traversal vulnerability in NEC Platforms, Ltd
• CVE-2026-4621 MEDIUM 5.6 MITIGATE UPGRADE Hidden Functionality vulnerability in NEC Platforms, Ltd
• CVE-2026-4620 CRITICAL 9.8 UPGRADE UPGRADE OS Command Injection vulnerability in NEC Platforms, Ltd
• CVE-2026-4622 CRITICAL 9.8 UPGRADE UPGRADE OS Command Injection vulnerability in NEC Platforms, Ltd
• CVE-2026-4309 MEDIUM 6.5 UPGRADE UPGRADE Missing Authorization vulnerability in NEC Platforms, Ltd

FAQ

How do I fix nec vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is nec being exploited right now?

None of the tracked nec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which nec CVE should I patch first?

CVE-2026-4620 currently ranks highest (55/100): OS Command Injection vulnerability in NEC Platforms, Ltd.

Products

• aterm wf1200cr firmware
• aterm wg1200cr firmware
• aterm wg1200hp4 firmware
• aterm wg2600hm4 firmware
• aterm wg2600hp4 firmware
• aterm wg2600hs firmware
• aterm wg2600hs2 firmware
• aterm wx1500hp firmware
• aterm wx3600hp firmware

RSS feed for nec · ← Back to latest CVEs