CVE Intelligence

NEC Platforms, Ltd. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting NEC Platforms, Ltd. products: 7 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-8652 High · 8.5 CWE-78 May 25, 2026
OS Command Injection in NEC Platforms, Ltd. Aterm MR51FN
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
CVE-2026-6059 Medium · 4.8 CWE-79 May 25, 2026
Cross-site Scripting (XSS) in NEC Platforms, Ltd. Aterm WX1800HP
A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.
CVE-2026-4622 Critical · 9.8 CWE-78 Mar 27, 2026
OS Command Injection in Nec Aterm Wg2600hs Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4621 Medium · 5.6 CWE-912 Mar 27, 2026
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker…
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
CVE-2026-4620 Critical · 9.8 CWE-78 Mar 27, 2026
OS Command Injection in Nec Aterm Wx3600hp Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4619 Critical · 9.8 CWE-22 Mar 27, 2026
Path Traversal in Nec Aterm Wx3600hp Firmware
Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.
CVE-2026-4309 Medium · 6.5 CWE-862 Mar 27, 2026
Missing Authorization in Nec Aterm Wg2600hs Firmware
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.