CVE-2026-42948CWE-79

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices

Medium · published May 13, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-05-13T12:02Z
EPSS history
Timeline
  • 13 MAY 12:02Z
    Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices
    cvelistv5