PT-2026-65421 · Elecom Co. · Wrc-X3000Gs3-B+1

CVE-2026-59764 · Published 2026-07-28 · Updated 2026-07-28

Mitre

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-59764

Affected Products

Wrc-X3000Gs3-B

Wrc-X3000Gs3A-B

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-59764 · Security Note
• https://elecom.co.jp/news/security/20260728-01 · Note
• https://jvn.jp/en/jp/JVN56870912 · Note