VulnSocial

CVE-2026-33366Disclosure(buffalo / fs-m1266)

LOWCVSS 6.9 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch buffalo fs-m1266 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

buffalo CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fs-m1266
  • fs-m1266_firmware
  • fs-s1266
  • fs-s1266_firmware

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
buffalo
Products
fs-m1266fs-m1266_firmwarefs-s1266fs-s1266_firmwarevr-u300wvr-u300w_firmwarevr-u500xvr-u500x_firmwarewapm-1266rwapm-1266r_firmware

1 version affected across 92 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-27: 3Patch / Workaround · 2026-03-27: 1Technical Details · 2026-03-27: 303-27
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-33366 Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authenticatio… https://www.cve.org/CVERecord?id=CVE-2026-33366

    Post summary

    The text announces CVE‑2026‑33366, a missing authentication flaw in BUFFALO Wi‑Fi routers that may allow attackers to forcibly reboot the devices, without mentioning PoC, exploit code, or patches.

    00010101
    56.9K followersView on X
  • Fernando Karl@fernandokarl
    Disclosure

    🚨 Nova vulnerabilidade CVE-2026-33366 afeta a disponibilidade dos serviços pela rede sem autenticação! Admins, priorizem a avaliação e mitigação. Apliquem controles de rede e monitorem logs! 🔐 Saiba mais: https://www.tenable.com/cve/CVE-2026-33366 #CyberSecurity #VulnerabilityManagement #CVE

    Post summary

    A new CVE-2026-33366 vulnerability that disrupts service availability through unauthenticated network access has been disclosed, with recommended network controls and log monitoring as mitigation.

    0000032
    260 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-33366 - BUFFALO Wi-Fi Router Unauthenticated Reboot Vulnerability Intel Report: https://ift.tt/piz0MvY

    Post summary

    The alert announces a Buffalo Wi‑Fi router unauthed reboot CVE, providing a link to an Intel report, but offers no PoC, exploit, patch, or evidence of active exploitation.

    0000033
    284 followersView on X
CPE platform detail92 entries

92 of 92 entries

PartVendorProductVersionTarget SWTarget HW
HWbuffalofs-m1266---
OSbuffalofs-m1266_firmware---
HWbuffalofs-s1266---
OSbuffalofs-s1266_firmware---
HWbuffalovr-u300w---
OSbuffalovr-u300w_firmware---
HWbuffalovr-u500x---
OSbuffalovr-u500x_firmware---
HWbuffalowapm-1266r---
OSbuffalowapm-1266r_firmware---
HWbuffalowapm-1266wdpr---
OSbuffalowapm-1266wdpr_firmware---
HWbuffalowapm-1266wdpra---
OSbuffalowapm-1266wdpra_firmware---
HWbuffalowapm-1750d---
OSbuffalowapm-1750d_firmware---
HWbuffalowapm-2133r---
OSbuffalowapm-2133r_firmware---
HWbuffalowapm-2133tr---
OSbuffalowapm-2133tr_firmware---
HWbuffalowapm-ax4r---
OSbuffalowapm-ax4r_firmware---
HWbuffalowapm-ax8r---
OSbuffalowapm-ax8r_firmware---
HWbuffalowapm-axetr---
OSbuffalowapm-axetr_firmware---
HWbuffalowaps-1266---
OSbuffalowaps-1266_firmware---
HWbuffalowaps-ax4---
OSbuffalowaps-ax4_firmware---
HWbuffalowcr-1166dhpl---
OSbuffalowcr-1166dhpl_firmware---
HWbuffalowem-1266---
OSbuffalowem-1266_firmware---
HWbuffalowem-1266wp---
OSbuffalowem-1266wp_firmware---
HWbuffalowrm-d2133hp---
OSbuffalowrm-d2133hp_firmware---
HWbuffalowrm-d2133hs---
OSbuffalowrm-d2133hs_firmware---
HWbuffalowsr3600be4-kh---
OSbuffalowsr3600be4-kh_firmware---
HWbuffalowsr3600be4p---
OSbuffalowsr3600be4p_firmware---
HWbuffalowtr-m2133hp---
OSbuffalowtr-m2133hp_firmware---
HWbuffalowtr-m2133hs---
OSbuffalowtr-m2133hs_firmware---
HWbuffalowxr-1750dhp---
HWbuffalowxr-1750dhp2---
OSbuffalowxr-1750dhp2_firmware---
OSbuffalowxr-1750dhp_firmware---
HWbuffalowxr-1900dhp---
HWbuffalowxr-1900dhp2---
OSbuffalowxr-1900dhp2_firmware---
HWbuffalowxr-1900dhp3---
OSbuffalowxr-1900dhp3_firmware---
OSbuffalowxr-1900dhp_firmware---
HWbuffalowxr-5950ax12---
OSbuffalowxr-5950ax12_firmware---
HWbuffalowxr-6000ax12b---
OSbuffalowxr-6000ax12b_firmware---
HWbuffalowxr-6000ax12p---
OSbuffalowxr-6000ax12p_firmware---
HWbuffalowxr-6000ax12s---
OSbuffalowxr-6000ax12s_firmware---
HWbuffalowxr18000be10p---
OSbuffalowxr18000be10p_firmware---
HWbuffalowzr-1166dhp---
HWbuffalowzr-1166dhp2---
OSbuffalowzr-1166dhp2_firmware---
OSbuffalowzr-1166dhp_firmware---
HWbuffalowzr-1750dhp---
HWbuffalowzr-1750dhp2---
OSbuffalowzr-1750dhp2_firmware---
OSbuffalowzr-1750dhp_firmware---
HWbuffalowzr-600dhp---
HWbuffalowzr-600dhp2---
OSbuffalowzr-600dhp2_firmware---
HWbuffalowzr-600dhp3---
OSbuffalowzr-600dhp3_firmware---
OSbuffalowzr-600dhp_firmware---
HWbuffalowzr-900dhp---
HWbuffalowzr-900dhp2---
OSbuffalowzr-900dhp2_firmware---
OSbuffalowzr-900dhp_firmware---
HWbuffalowzr-s1750dhp---
OSbuffalowzr-s1750dhp_firmware---
HWbuffalowzr-s600dhp---
OSbuffalowzr-s600dhp_firmware---
HWbuffalowzr-s900dhp---
OSbuffalowzr-s900dhp_firmware---

Explore more

Back to dashboardbuffalo CVEsfs-m1266 vulnerabilities