PT-2026-28475 · Buffalo · Buffalo Wi-Fi Router

Published 2026-03-27 · Updated 2026-03-27 · CVE-2026-33280

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi router products (affected versions not specified)

Description A hidden functionality issue exists that may allow an attacker to gain access to the product’s debugging functionality. Successful exploitation could result in the execution of arbitrary OS commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2026-33280

Affected Products

Buffalo Wi-Fi Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-33280 · Security Note
• https://buffalo.jp/news/detail/20260323-01.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2037513369880527170 · Twitter Post
• https://jvn.jp/en/jp/JVN83788689 · Note