High severity7.2NVD Advisory· Published Sep 28, 2026

CVE-2026-86530

Description

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.

Affected products

Buffalotech/Wi-Fi productsllm-create

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU94863997/nvd
www.buffalo.jp/news/detail/20260928-01.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000