← back
CVE-2026-4622

CVE-2026-4622

CVSS 7.1 HIGHEPSS 0.9%CWE-78
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.1EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Mar 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
NEC Platforms, Ltd. · Aterm GB1200PENEC Platforms, Ltd. · Aterm WF1200CRNEC Platforms, Ltd. · Aterm WG1200CRNEC Platforms, Ltd. · Aterm WG2600HM4NEC Platforms, Ltd. · Aterm WG2600HP4NEC Platforms, Ltd. · Aterm WG2600HSNEC Platforms, Ltd. · Aterm WG2600HS2NEC Platforms, Ltd. · Aterm WX3000HPNEC Platforms, Ltd. · Aterm WX3000HP2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jpn.nec.com/security-info/secinfo/nv26-001_en.html