Which versions of Wrc X1500Gsa B Firmware are affected by CVE-2026-22550?

A high-severity command injection vulnerability in WRC-X1500GS-B and WRC-X1500GSA-B network devices allows authenticated users to execute arbitrary OS commands, potentially compromising network…

How to fix or mitigate CVE-2026-22550?

Within 24 hours: Inventory all WRC-X1500GS-B and WRC-X1500GSA-B devices in production and restrict administrative access to trusted personnel only. Within 7 days: Implement network segmentation to isolate affected devices and monitor for suspicious command patterns. Within 30 days: Contact vendor for patch availability, evaluate replacement device options, or deploy WAF rules to block malicious payloads if external access exists.

Wrc X1500Gsa B Firmware CVE-2026-22550

Q: What is the CVSS score of CVE-2026-22550?

CVE-2026-22550 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

HIGH

OS Command Injection (CWE-78)

2026-02-03 vultures@jpcert.or.jp

Command Injection Wrc X1500Gsa B Firmware Wrc X1500Gs B Firmware

8.6

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 07:16 nvd

HIGH 8.6

DescriptionCVE.org

OS command injection vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B. A crafted request from a logged-in user may lead to an arbitrary OS command execution.

AnalysisAI

Authenticated command injection in WRC-X1500GS-B and WRC-X1500GSA-B routers enables logged-in users to execute arbitrary OS commands through specially crafted requests. An attacker with valid credentials can gain complete system control over the affected devices. No patch is currently available to remediate this vulnerability.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). OS command injection vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B. A crafted request from a logged-in user may lead to an arbitrary OS command execution.