CVE-2026-4622: Nec Aterm GB1200PE Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Affected products

• Nec Aterm GB1200PE Firmware: before 1.3.1 (fixed in 1.3.1)
• Nec Aterm WF1200CR Firmware: before 1.6.0 (fixed in 1.6.0)
• Nec Aterm WG1200CR Firmware: before 1.5.0 (fixed in 1.5.0)
• Nec Aterm WG2600HM4 Firmware: before 1.4.2 (fixed in 1.4.2)
• Nec Aterm WG2600HP4 Firmware: before 1.4.2 (fixed in 1.4.2)
• Nec Aterm WG2600HS2 Firmware: before 1.3.2 (fixed in 1.3.2)
• Nec Aterm WG2600HS Firmware: before 1.7.2 (fixed in 1.7.2)
• Nec Aterm WX3000HP2 Firmware: before 1.3.2 (fixed in 1.3.2)
• Nec Aterm WX3000HP Firmware: before 2.5.0 (fixed in 2.5.0)

Published 2026-03-27. Last modified 2026-06-17.