CVE-2026-42062
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
May 13, 2026
Vendor
unknown
Description
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.