← Back to CVE search

CVE-2026-42948

ELECOM

Description

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user-s web browser.

CVSS 4.8EPSS 0.161%Risk 0.49
View source
Published
2026-05-13 13:16:44
Affected versions
unknown
Type
Firmware
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N