CVE-2026-95104: Buffalo Inc Wex-g300

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.

Affected products

• Buffalo Inc Wex-g300: before 1.71 (fixed in 1.71)
• Buffalo Inc Wsr-300hp: before 2.55 (fixed in 2.55)

Published 2026-09-28. Last modified 2026-09-30.