CVE-2026-20704: Elecom Co.,ltd Wrc-x1500gs-B

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed.

Affected products

• Elecom Co.,ltd Wrc-x1500gs-B: up to and including v1.12
• Elecom Co.,ltd Wrc-x1500gsa-B: up to and including v1.12
• Elecom Co.,ltd Wrc-x1800gs-B: up to and including v1.19
• Elecom Co.,ltd Wrc-x1800gsa-B: up to and including v1.19
• Elecom Co.,ltd Wrc-x1800gsh-B: up to and including v1.19
• Elecom Co.,ltd Wrc-x3000gs2-B: up to and including v1.09
• Elecom Co.,ltd Wrc-x3000gs2-W: up to and including v1.09
• Elecom Co.,ltd Wrc-x3000gs2a-B: up to and including v1.09
• Elecom Co.,ltd Wrc-x3000gst2-B: up to and including v1.06
• Elecom Co.,ltd Wrc-x6000qs-G: up to and including v1.14
• Elecom Co.,ltd Wrc-x6000qsa-G: up to and including v1.14
• Elecom Co.,ltd Wrc-x6000xs-G: up to and including v1.12
• Elecom Co.,ltd Wrc-x6000xst-G: up to and including v1.16
• Elecom Co.,ltd Wrc-XE5400GS-G: up to and including v1.13
• Elecom Co.,ltd Wrc-XE5400GSA-G: up to and including v1.13

Published 2026-02-03. Last modified 2026-06-17.