CVE-2026-95104
HIGHCVSS 7.5/10EPSS 0.36%
Last modified
CVE-2026-95104 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| BUFFALO INC. | WSR-300HP | < Ver.2.55 |
| BUFFALO INC. | WEX-G300 | < Ver.1.71 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-95104?
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.
How severe is CVE-2026-95104?
CVE-2026-95104 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.
How do I fix CVE-2026-95104?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9506This vulnerability exists in Bagisto due to improper validat…8.7
- CVE-2026-9507A session fixation vulnerability has been identified in osTi…5.1
- CVE-2026-9508Incorrect permission settings on a critical resource in Supr…10
- CVE-2026-9509An unhandled exception in Suprema BioStar 2 (Server), versio…8.7
- CVE-2026-95101Description NGINX Plus and NGINX Open Source have a vulnerab…5.3
- CVE-2026-95102WebSocket endpoints lack proper authentication mechanisms, e…9.4
- CVE-2026-95105Reliance on Obfuscation or Encryption of Security-Relevant I…8.2
- CVE-2026-95106Gitea accepted pushed Git trees containing two entries with …9.1
- CVE-2026-95107A ThreadX module chooses `object_size` when it calls `txm_mo…7
- CVE-2026-95108One logical thread of a user-mode ThreadX module costs the M…6.8
- CVE-2026-95109The Cortex-A7 MMU Modules port validates a caller-supplied b…8.5
- CVE-2026-9511A vulnerability was identified in Totolink CA750-PoE 6.2c.51…6.3
Are you affected by CVE-2026-95104?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST