CVE-2024-26258: Elecom Wrc-g01-W Firmware

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.

Affected products

• Elecom Wrc-g01-W Firmware: up to and including 1.24
• Elecom Wrc-x3200gst3-B Firmware: up to and including 1.25
• Elecom Co.,ltd Wmc-2lx-B: up to and including v1.42
• Elecom Co.,ltd Wmc-x1800gst-B: up to and including v1.42
• Elecom Co.,ltd Wrc-1167gst2: up to and including v1.32
• Elecom Co.,ltd Wrc-2533gst2: up to and including v1.30
• Elecom Co.,ltd Wrc-g01-W: up to and including v1.24
• Elecom Co.,ltd Wrc-x3200gst3-B: up to and including v1.25
• Elecom Co.,ltd Wsc-x1800gs-B: up to and including v1.42

Published 2024-04-04. Last modified 2026-06-17.