CVE-2026-24465: Elecom Wab-s300iw-Ac Firmware

Critical severity, CVSS 9.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.

Affected products

• Elecom Wab-s300iw-Ac Firmware: before 5.5.02 (fixed in 5.5.02)
• Elecom Wab-s300iw-Pd Firmware: any version
• Elecom Wab-s300iw2-Pd Firmware: before 5.5.02 (fixed in 5.5.02)
• Elecom Wab-s733iw-Ac Firmware: before 5.5.02 (fixed in 5.5.02)
• Elecom Wab-s733iw-Pd Firmware: any version
• Elecom Wab-s733iw2-Pd Firmware: before 5.5.02 (fixed in 5.5.02)
• Elecom Wrc-x1500gs-B Firmware: before 1.13 (fixed in 1.13)
• Elecom Wrc-x1500gsa-B Firmware: before 1.13 (fixed in 1.13)

Published 2026-02-03. Last modified 2026-06-17.