Buffalo Wxr-6000ax12s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Buffalo Wxr-6000ax12s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-27650 — CVSS 9.8 (critical): OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may…
• CVE-2026-32669 — CVSS 9.8 (critical): Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed…
• CVE-2026-33280 — CVSS 9.8 (critical): Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging…
• CVE-2022-40966 — CVSS 8.8 (high): Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and…
• CVE-2026-32678 — CVSS 7.5 (high): Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings…
• CVE-2026-33366 — CVSS 5.3 (medium): Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the…