PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-42948 ELECOM CO.,LTD. CVE debrief

CVE-2026-42948 is a stored cross-site scripting vulnerability in ELECOM wireless LAN access point devices. If an administrator inputs malicious data, an arbitrary script may be executed in another administrative user's web browser. The CVSS score is 4.8, and the severity is MEDIUM. This vulnerability requires verification and potential patching by defenders responsible for ELECOM wireless LAN access point devices, particularly those with administrative access. The CVE record and NVD entry provide details on the vulnerability, but specific versions of affected devices are not specified.

Vendor
ELECOM CO.,LTD.
Product
WAB-BE187-M
CVSS
MEDIUM 4.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-13
Original CVE updated
2026-10-26
Advisory published
2026-05-13
Advisory updated
2026-10-26

Who should care

Defenders responsible for ELECOM wireless LAN access point devices, particularly those with administrative access, should assess potential exposure and prioritize verification and patching.

Why it matters

CVE-2026-42948 is a stored cross-site scripting vulnerability in ELECOM wireless LAN access point devices that could lead to arbitrary script execution in administrative users' web browsers, requiring verification and potential patching by defenders.

  • Potential execution of arbitrary scripts in administrative users' web browsers
  • Possible compromise of administrative access
  • Required verification of ELECOM wireless LAN access point devices for exposure
  • Necessity for updates or patches to mitigate the vulnerability

Technical summary

A stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators inputs malicious data, an arbitrary script may be executed in another administrative user's web browser. This vulnerability is rated with a CVSS score of 4.8 and a severity of MEDIUM. Defenders should prioritize verifying ELECOM wireless LAN access point devices for potential exposure and assess the need for updates or patches.

Defensive priority

Defenders should prioritize verifying ELECOM wireless LAN access point devices for potential exposure and assess the need for updates or patches.

Recommended defensive actions

  • Verify ELECOM wireless LAN access point devices for potential exposure
  • Assess the need for updates or patches
  • Monitor administrative user activity for suspicious scripts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but the specific versions of ELECOM wireless LAN access point devices affected are not specified.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-42948 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-42948

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-42948 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-42948

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.