PT-2026-25798 · Buffalo+1 · Terastation Nas Ts5400R+1

Vulncheck · Published 2026-03-16 · Updated 2026-05-14 · CVE-2026-29516

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Buffalo TeraStation NAS TS5400R versions 4.02-0.06 and earlier

Description An excessive file permissions issue exists in Buffalo TeraStation NAS TS5400R. Authenticated attackers can read the /etc/shadow file by uploading and executing a PHP file through the webserver. Exploiting world-readable permissions on /etc/shadow allows retrieval of hashed passwords for all configured accounts, including the root account. The /etc/shadow file contains sensitive password information. The affected API endpoint is the webserver used for file uploads. The vulnerable parameter is the uploaded PHP file.

Recommendations Versions prior to 4.02-0.06 should be updated.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2026-29516

Affected Products

Terastation Nas Ts5400R

Terastation Nas Ts5400R Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-29516 · Security Note
• https://twitter.com/CVEnew/status/2033755326428635137 · Twitter Post
• https://buffaloamericas.com · Note
• https://twitter.com/VulmonFeeds/status/2033779186494517418 · Twitter Post
• https://vulncheck.com/advisories/buffalo-terastation-ts5400r-excessive-file-permissions-information-disclosure · Note
• https://t.me/cveNotify/163518 · Telegram Post