CVE-2026-33366
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.
- CVSS 4.0
- 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.0
- 5.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-26)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- buffalo:fs-m1266_firmware
- buffalo:fs-s1266_firmware
- buffalo:vr-u300w_firmware
- buffalo:vr-u500x_firmware
- buffalo:wapm-1266r_firmware
- buffalo:wapm-1266wdpr_firmware
- buffalo:wapm-1266wdpra_firmware
- buffalo:wapm-1750d_firmware
- buffalo:wapm-2133r_firmware
- buffalo:wapm-2133tr_firmware
- buffalo:wapm-ax4r_firmware
- buffalo:wapm-ax8r_firmware
- buffalo:wapm-axetr_firmware
- buffalo:waps-1266_firmware
- buffalo:waps-ax4_firmware
- buffalo:wcr-1166dhpl_firmware
- buffalo:wem-1266_firmware
- buffalo:wem-1266wp_firmware
- buffalo:wrm-d2133hp_firmware
- buffalo:wrm-d2133hs_firmware
- buffalo:wsr3600be4-kh_firmware
- buffalo:wsr3600be4p_firmware
- buffalo:wtr-m2133hp_firmware
- buffalo:wtr-m2133hs_firmware
- buffalo:wxr-1750dhp2_firmware
- buffalo:wxr-1750dhp_firmware
- buffalo:wxr-1900dhp2_firmware
- buffalo:wxr-1900dhp3_firmware
- buffalo:wxr-1900dhp_firmware
- buffalo:wxr-5950ax12_firmware
- buffalo:wxr-6000ax12b_firmware
- buffalo:wxr-6000ax12p_firmware
- buffalo:wxr-6000ax12s_firmware
- buffalo:wxr18000be10p_firmware
- buffalo:wzr-1166dhp2_firmware
- buffalo:wzr-1166dhp_firmware
- buffalo:wzr-1750dhp2_firmware
- buffalo:wzr-1750dhp_firmware
- buffalo:wzr-600dhp2_firmware
- buffalo:wzr-600dhp3_firmware
- buffalo:wzr-600dhp_firmware
- buffalo:wzr-900dhp2_firmware
- buffalo:wzr-900dhp_firmware
- buffalo:wzr-s1750dhp_firmware
- buffalo:wzr-s600dhp_firmware
- buffalo:wzr-s900dhp_firmware