CVE-2026-32669 HIGH

CVE-2026-32669

Vendor Buffalo Inc.
Product BUFFALO Wi-Fi router products
Weakness CWE-94 · Code injection
Published March 27, 2026
Last update March 27, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

Key dates

02Disclosure timeline

March 27, 2026 CVE published
March 27, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-45261 GitButler: Link injection via forge integration enables arbitrary script execution CVE-2025-60068 WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability CVE-2023-0598 GE Digital Proficy Code Injection CVE-2024-11038 WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form CVE-2022-46333 Proofpoint Enterprise Protection perl eval() arbitrary command execution