Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-29516 Buffalo TeraStation NAS Authenticated Arbitrary File Read Vulnerability in Firmware 4.02-0.06 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29516
Post summary
The advisory announces the discovery of CVE‑2026‑29516, an authenticated arbitrary file read vulnerability in Buffalo TeraStation NAS firmware 4.02-0.06, with no exploitation, patch or PoC details provided.
CVE-2026-29516 Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read t… https://www.cve.org/CVERecord?id=CVE-2026-29516
Post summary
The text describes a file permissions flaw in Buffalo TeraStation NAS firmware that lets authenticated attackers read files, but it provides no proof of concept, exploit code, or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | buffaloamericas | terastation_nas_ts5400r | - | - | - |
| OS | buffaloamericas | terastation_nas_ts5400r_firmware | - | - | - |