MEDIUM
ELECOM CO.,LTD.
CVE published 2026-05-13
CVE-2026-42948
CVE-2026-42948 is a stored cross-site scripting vulnerability in ELECOM wireless LAN access point devices. If an administrator inputs malicious data, an arbitrary script may be executed in another administrative user's web browser. The CVSS score is 4.8, and the severity is MEDIUM. This vulnerability requires verification and potential patching by defenders responsible for ELECOM wireless LAN access point [truncated]