PatchSiren

ELECOM CO.,LTD. CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM ELECOM CO.,LTD. CVE published 2026-05-13

CVE-2026-42948

CVE-2026-42948 is a stored cross-site scripting vulnerability in ELECOM wireless LAN access point devices. If an administrator inputs malicious data, an arbitrary script may be executed in another administrative user's web browser. The CVSS score is 4.8, and the severity is MEDIUM. This vulnerability requires verification and potential patching by defenders responsible for ELECOM wireless LAN access point [truncated]