ZeroHour

CVE-2026-4622

CVSS 4.0
7.1 high
EPSS
<1%p56
Published
()
Modified
Description

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Vendors
nec
Products
aterm wg2600hs firmware, aterm wf1200cr firmware, aterm wg1200cr firmware, aterm wg2600hp4 firmware, aterm wg2600hm4 firmware, aterm wg2600hs2 firmware, aterm wx3000hp firmware, aterm wx3000hp2 firmware, aterm gb1200pe firmware
Weakness
CWE-78
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

In the news

No ingested article mentions this CVE yet.