CVE-2026-33280: High severity Buffalo BUFFALO Wi-Fi routers vulnerability
Published Mar 27, 2026
·Updated
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
Affected Software
93 affected components
Buffalo BUFFALO Wi-Fi routers
All of the following
Buffalo Wcr-1166dhpl Firmware<1.01
Buffalo Wcr-1166dhpl
All of the following
Buffalo Wsr3600be4-kh Firmware<6.02
Buffalo Wsr3600be4-kh
All of the following
Buffalo Wsr3600be4p Firmware<5.02
Buffalo Wsr3600be4p
All of the following
Buffalo WXR-1750DHP firmware<2.63
Buffalo WXR-1750DHP
All of the following
Buffalo WXR-1750DHP2 firmware<2.63
Buffalo WXR-1750DHP2
All of the following
Buffalo Wxr18000be10p Firmware<5.03
Buffalo Wxr18000be10p
All of the following
Buffalo WXR-1900DHP firmware<2.53
Buffalo WXR-1900DHP
All of the following
Buffalo WXR-1900DHP2 firmware<2.62
Buffalo WXR-1900DHP2
All of the following
Buffalo WXR-1900DHP3 firmware<2.66
Buffalo WXR-1900DHP3
All of the following
Buffalo WXR-5950AX12 firmware<3.57
Buffalo WXR-5950AX12
All of the following
Buffalo WXR-6000AX12B firmware<3.57
Buffalo WXR-6000AX12B
All of the following
Buffalo Wxr-6000ax12p Firmware<3.57
Buffalo Wxr-6000ax12p
All of the following
Buffalo WXR-6000AX12S firmware<3.57
Buffalo WXR-6000AX12S
All of the following
Buffalo WZR-1166DHP firmware<2.20
Buffalo WZR-1166DHP
All of the following
Buffalo WZR-1166DHP2 firmware<2.20
Buffalo WZR-1166DHP2
All of the following
Buffalo WZR-1750DHP firmware<2.32
Buffalo WZR-1750DHP
All of the following
Buffalo WZR-1750DHP2 firmware<2.33
Buffalo WZR-1750DHP2
All of the following
Buffalo WZR-S1750DHP firmware<2.34
Buffalo WZR-S1750DHP
All of the following
Buffalo WRM-D2133HP firmware<3.01
Buffalo WRM-D2133HP
All of the following
Buffalo WRM-D2133HS firmware<3.01
Buffalo WRM-D2133HS
All of the following
Buffalo WTR-M2133HP firmware<3.01
Buffalo WTR-M2133HP
All of the following
Buffalo WTR-M2133HS firmware<3.01
Buffalo WTR-M2133HS
All of the following
Buffalo WEM-1266 firmware<2.87
Buffalo WEM-1266
All of the following
Buffalo WEM-1266WP firmware<2.87
Buffalo WEM-1266WP
All of the following
Buffalo Vr-u300w Firmware<1.42
Buffalo Vr-u300w
All of the following
Buffalo Vr-u500x Firmware<1.42
Buffalo Vr-u500x
All of the following
Buffalo Wapm-1266r Firmware<1.42
Buffalo Wapm-1266r
All of the following
Buffalo Wapm-1266wdpr Firmware<1.42
Buffalo Wapm-1266wdpr
All of the following
Buffalo Wapm-1266wdpra Firmware<1.42
Buffalo Wapm-1266wdpra
All of the following
Buffalo Wapm-1750d Firmware<1.07
Buffalo Wapm-1750d
All of the following
Buffalo Wapm-2133r Firmware<1.42
Buffalo Wapm-2133r
All of the following
Buffalo Wapm-2133tr Firmware<1.42
Buffalo Wapm-2133tr
All of the following
Buffalo Wapm-ax4r Firmware<1.42
Buffalo Wapm-ax4r
All of the following
Buffalo Wapm-ax8r Firmware<1.42
Buffalo Wapm-ax8r
All of the following
Buffalo Wapm-axetr Firmware<1.42
Buffalo Wapm-axetr
All of the following
Buffalo Waps-1266 Firmware<1.42
Buffalo Waps-1266
All of the following
Buffalo Waps-ax4 Firmware<1.42
Buffalo Waps-ax4
All of the following
Buffalo Fs-m1266 Firmware<4.13
Buffalo Fs-m1266
All of the following
Buffalo Fs-s1266 Firmware<4.13
Buffalo Fs-s1266
All of the following
Buffalo WZR-600DHP firmware
Buffalo WZR-600DHP
All of the following
Buffalo WZR-600DHP2 firmware
Buffalo WZR-600DHP2
All of the following
Buffalo WZR-600DHP3 firmware
Buffalo WZR-600DHP3
All of the following
Buffalo WZR-900DHP firmware
Buffalo WZR-900DHP
All of the following
Buffalo WZR-900DHP2 firmware
Buffalo WZR-900DHP2
All of the following
Buffalo WZR-S600DHP firmware
Buffalo WZR-S600DHP
All of the following
Buffalo WZR-S900DHP firmware
Buffalo WZR-S900DHP
Event History
Mar 27, 2026
CVE Published
via MITRE·05:25 AM
Data Sourced
via MITRE·05:25 AM
DescriptionSeverity
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-33280?
CVE-2026-33280 is classified as a high severity vulnerability due to its potential for allowing unauthorized access to debugging functionalities on BUFFALO Wi-Fi routers.
2
How do I fix CVE-2026-33280?
To mitigate CVE-2026-33280, users should update their BUFFALO Wi-Fi routers to the latest firmware version provided by the manufacturer.
3
What products are affected by CVE-2026-33280?
CVE-2026-33280 affects various models of BUFFALO Wi-Fi routers, which may expose debugging functionalities to attackers.
4
What could an attacker do with CVE-2026-33280?
An attacker exploiting CVE-2026-33280 could execute arbitrary operating system commands on the compromised BUFFALO Wi-Fi router.
5
Is there a workaround for CVE-2026-33280?
While the best solution is to apply the firmware update, temporarily limiting remote administration features may serve as a workaround for CVE-2026-33280.