CVE-2026-22550CWE-78

OS command injection vulnerability exists in ELECOM wireless LAN products

High · published February 3, 2026

CVSS v4.0
8.6
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

🔥 A crafty request from a logged-in user can unleash arbitrary OS commands in ELECOM wireless LAN products! ⚡ Think of it like a hotel guest who, once checked in, can sneak behind the reception desk and start issuing commands to the entire hotel — a recipe for chaos! An attacker could execute any command they desire on the underlying operating system, leading to potential unauthorized access, data breaches, or even full system compromise. This vulnerability presents a serious risk for any network using these devices, as it could allow malicious actors to take control and wreak havoc.

Put simply

Think of it like a hotel guest who, once checked in, can sneak behind the reception desk and start issuing commands to the entire hotel — a recipe for chaos! This OS command injection vulnerability in ELECOM wireless LAN products allows a logged-in user to inject and execute arbitrary commands on the operating system through crafted requests, bypassing normal security measures.

What to do

An attacker could execute any command they desire on the underlying operating system, leading to potential unauthorized access, data breaches, or even full system compromise. This vulnerability presents a serious risk for any network using these devices, as it could allow malicious actors to take control and wreak havoc. To protect your network, immediately update your ELECOM devices to the latest firmware version. If an update isn’t available, consider implementing stricter access controls and monitoring user activities for suspicious behavior. Regular audits of your network security can also help mitigate risks. You’ve got this! With these steps, you can secure your network and keep it safe from potential threats. 🛡️

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01873 · 79.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-02-03T06:56Z
EPSS history
Timeline
  • 03 FEB 06:56Z
    OS command injection vulnerability exists in ELECOM wireless LAN products
    cvelistv5