Buffalo Fs-M1266 Firmware vulnerabilities

CVE-2026-27650 [CRITICAL] CWE-78 CVE-2026-27650: OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.

CVE-2026-33280 [CRITICAL] CWE-912 CVE-2026-33280: Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to g Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

CVE-2026-32678 [HIGH] CWE-288 CVE-2026-32678: Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

CVE-2026-32669 [CRITICAL] CWE-94 CVE-2026-32669: Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is explo Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

CVE-2026-33366 [MEDIUM] CWE-306 CVE-2026-33366: Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allo Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.