CVE-2026-86530
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.
- Published Sep 28, 2026
- CVSS 8.6 high
- 0.4% chance of exploitation in the next 30 days (EPSS)