Wzr-1166dhp Firmware vulnerabilities

5 known vulnerabilities in Wzr-1166dhp Firmware from Buffalo. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BUFFALO Wi-Fi router products: Hidden Functionality

  CVE-2026-33280Mar 27, 2026Buffalo

  Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

• 8.7 High severity

  BUFFALO Wi-Fi router products: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-32678Mar 27, 2026Buffalo

  Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

• 9.8 Critical severity

  BUFFALO Wi-Fi router products: Improper Control of Generation of Code

  CVE-2026-32669Mar 27, 2026Buffalo

  Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.

• 9.8 Critical severity

  BUFFALO Wi-Fi router products: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-27650Mar 27, 2026Buffalo

  OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.

• 8.8 High severity

  Buffalo network devices: Improper Authentication

  CVE-2022-40966Dec 7, 2022Buffalo

  Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmw