CVE-2026-33280
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker...
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- Record
CVE-2026-33280- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.0
- 7.2 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
EUVDEUVD-2026-16549
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- Record
EUVD-2026-16549- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3vp9-wjw8-vgmx
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker...
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- Record
GHSA-3vp9-wjw8-vgmx- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.0
- 7.2 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
NVD
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- Record
CVE-2026-33280- CVSS 4.0
- 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.2 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
Affected products
- buffalo inc. wi-fi router products
- buffalo fs-m1266 firmware
- buffalo fs-s1266 firmware
- buffalo vr-u300w firmware
- buffalo vr-u500x firmware
- buffalo wapm-1266r firmware
- buffalo wapm-1266wdpr firmware
- buffalo wapm-1266wdpra firmware
- buffalo wapm-1750d firmware
- buffalo wapm-2133r firmware
- buffalo wapm-2133tr firmware
- buffalo wapm-ax4r firmware
Show 35 moreShow less
- buffalo wapm-ax8r firmware
- buffalo wapm-axetr firmware
- buffalo waps-1266 firmware
- buffalo waps-ax4 firmware
- buffalo wcr-1166dhpl firmware
- buffalo wem-1266 firmware
- buffalo wem-1266wp firmware
- buffalo wrm-d2133hp firmware
- buffalo wrm-d2133hs firmware
- buffalo wsr3600be4-kh firmware
- buffalo wsr3600be4p firmware
- buffalo wtr-m2133hp firmware
- buffalo wtr-m2133hs firmware
- buffalo wxr-1750dhp2 firmware
- buffalo wxr-1750dhp firmware
- buffalo wxr-1900dhp2 firmware
- buffalo wxr-1900dhp3 firmware
- buffalo wxr-1900dhp firmware
- buffalo wxr-5950ax12 firmware
- buffalo wxr-6000ax12b firmware
- buffalo wxr-6000ax12p firmware
- buffalo wxr-6000ax12s firmware
- buffalo wxr18000be10p firmware
- buffalo wzr-1166dhp2 firmware
- buffalo wzr-1166dhp firmware
- buffalo wzr-1750dhp2 firmware
- buffalo wzr-1750dhp firmware
- buffalo wzr-600dhp2 firmware
- buffalo wzr-600dhp3 firmware
- buffalo wzr-600dhp firmware
- buffalo wzr-900dhp2 firmware
- buffalo wzr-900dhp firmware
- buffalo wzr-s1750dhp firmware
- buffalo wzr-s600dhp firmware
- buffalo wzr-s900dhp firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-33280 is a high vulnerability (CVSS 8.6) in Buffalo Inc. Wi-fi Router Products, published March 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.