QwikSec

Security Database

CVE

CWE

Training

CVE-2026-4622

Published: Mar 27, 2026

Modified: Apr 10, 2026

PUBLISHED

Description

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Vendor	Product	Versions
NEC Platforms, Ltd.	Aterm WG2600HS	affected `Before Ver. 1.7.2`
NEC Platforms, Ltd.	Aterm WF1200CR	affected `Before Ver. 1.6.0`
NEC Platforms, Ltd.	Aterm WG1200CR	affected `Before Ver. 1.5.0`
NEC Platforms, Ltd.	Aterm WG2600HP4	affected `Before Ver. 1.4.2`
NEC Platforms, Ltd.	Aterm WG2600HM4	affected `Before Ver. 1.4.2`
NEC Platforms, Ltd.	Aterm WG2600HS2	affected `Before Ver. 1.3.2`
NEC Platforms, Ltd.	Aterm WX3000HP	affected `Before Ver. 2.5.0`
NEC Platforms, Ltd.	Aterm WX3000HP2	affected `Before Ver. 1.3.2`
NEC Platforms, Ltd.	Aterm GB1200PE	affected `Before Ver. 1.3.1`

Weaknesses (CWE)

References

https://jpn.nec.com/security-info/secinfo/nv26-001_en.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.