CVE-2026-33366 | THREATINT

Description

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

PUBLISHED Reserved 2026-03-25 | Published 2026-03-27 | Updated 2026-03-27 | Assigner jpcert

MEDIUM: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

Missing authentication for critical function

Product status

See "References" section

affected

References

www.buffalo.jp/news/detail/20260323-01.html

jvn.jp/en/jp/JVN83788689/

cve.org (CVE-2026-33366)

nvd.nist.gov (CVE-2026-33366)

Download JSON