CVE-2026-59764: Elecom Co.,ltd Wrc-x3000gs3-B

High severity, CVSS 8.6. EPSS: 1.7% chance of exploitation in the next 30 days.

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Affected products

• Elecom Co.,ltd Wrc-x3000gs3-B: up to and including v1.06
• Elecom Co.,ltd Wrc-x3000gs3a-B: up to and including v1.06

Published 2026-07-28. Last modified 2026-07-28.