VulnSocial

CVE-2026-42062Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-05-13); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-05-13: 1Mentions · 2026-05-15: 1Mentions · 2026-05-18: 1Patch / Workaround · 2026-05-15: 1Technical Details · 2026-05-13: 1Technical Details · 2026-05-15: 1Technical Details · 2026-05-18: 105-1305-1505-18
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-131
Disclosure1
2026-05-151
Patch1
2026-05-181
Disclosure1
Full discourse3 posts
  • キタきつね@foxbook
    Disclosure

    パスワード不要：深刻度9.8　ELECOMルーターの欠陥によりネットワーク全体を乗っ取ることが可能 No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover #DailyCyberSecurity (May 15) https://securityonline.info/elecom-router-vulnerability-cve-2026-42062-auth-bypass/

    Post summary

    The tweet headlines a high‑severity authentication bypass flaw in ELECOM routers (CVE‑2026‑42062) that could enable full network takeover, without indicating active exploitation or mitigation details.

    01041381
    4.9K followersView on X
  • Gray Hats@the_yellow_fall
    Patch

    ELECOM routers hit by critical 9.8 CVSS flaws (CVE-2026-42062). Unauthenticated attackers can execute OS commands and bypass auth. Update firmware now! #ELECOM #CyberSecurity #InfoSec #RouterSecurity #VulnerabilityAlert #CVE #NetworkSecurity #WiFiSecurity https://securityonline.info/elecom-router-vulnerability-cve-2026-42062-auth-bypass/

    Post summary

    The text announces CVE-2026-42062 as a critical vulnerability in ELECOM routers, enabling unauthenticated OS command execution and authentication bypass, and urges users to apply firmware updates.

    00000306
    12.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-42062 Unauthenticated OS Command Injection in ELECOM Wireless LAN Access Point Devices https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42062

    Post summary

    A brief disclosure of CVE-2026-42062, noting an unauthenticated OS command injection in ELECOM Wi‑Fi access points, with no PoC, exploit, or mitigation information given.

    0000044
    4.0K followersView on X

Explore more

Back to dashboard