How many Buffalo wzr-900dhp firmware CVEs are in CISA KEV?

None of Buffalo wzr-900dhp firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Buffalo wzr-900dhp firmware are affected?

2 distinct Buffalo wzr-900dhp firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Buffalo wzr-900dhp firmware CVEs?

Buffalo wzr-900dhp firmware's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-306 (Missing Authentication for Critical Function), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

What is the average severity of Buffalo wzr-900dhp firmware CVEs?

The average CVSS base score across Buffalo wzr-900dhp firmware's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Buffalo

10 CVEs

Buffalo wzr-900dhp firmware Vulnerabilities

Name: Buffalo wzr-900dhp firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wzr-900dhp firmware by Buffalo.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.8

Avg CVSS

2016–2026

Last updated March 27, 2026

Overview

Buffalo wzr-900dhp firmware has 10 published CVE records since 2016, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Buffalo wzr-900dhp firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include wzr-900dhp.

Severity and exploitation

How the CVSS severity of Buffalo wzr-900dhp firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High6

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Buffalo wzr-900dhp firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Buffalo wzr-900dhp firmware CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Buffalo wzr-900dhp firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.153 CVEs
<= 1.112 CVEs

Find a version

10 CVEs

Sort

Medium vulnerability · 2026-03-27
CVE-2026-33366
Patch
CWE-306
Medium · CVSS 6.9
EPSS 0.3% (27th pct)2026-03-27
High vulnerability · 2026-03-27
CVE-2026-33280
Patch
CWE-912
High · CVSS 8.6
EPSS 0.4% (31th pct)2026-03-27
High vulnerability · 2026-03-27
CVE-2026-32678
Patch
CWE-288
High · CVSS 8.7
EPSS 0.3% (24th pct)2026-03-27
High vulnerability · 2026-03-27
CVE-2026-32669
Patch
CWE-94
High · CVSS 8.7
EPSS 0.3% (18th pct)2026-03-27
High vulnerability · 2026-03-27
CVE-2026-27650
Patch
CWE-78
High · CVSS 8.6
EPSS 0.9% (58th pct)2026-03-27
High vulnerability · 2022-12-07
CVE-2022-40966CWE-287
High · CVSS 8.8
EPSS 0.3% (27th pct)2022-12-07
Medium vulnerability · 2022-12-07
CVE-2022-39044
Medium · CVSS 6.8
EPSS 0.3% (24th pct)2022-12-07
Medium vulnerability · 2022-12-07
CVE-2022-34840CWE-798
Medium · CVSS 6.5
EPSS 0.2% (15th pct)2022-12-07
Medium vulnerability · 2016-06-19
CVE-2016-4816
Medium · CVSS 6.5
EPSS 1.4% (71th pct)2016-06-19
High vulnerability · 2016-06-19
CVE-2016-4815
High · CVSS 7.5
EPSS 2.2% (81th pct)2016-06-19

Common weakness types

The CWE weakness categories most often found in Buffalo wzr-900dhp firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Buffalo wzr-900dhp firmware CVEs were published each year.

2016

2

2022

3

2026

5

Other Buffalo products

Browse vulnerabilities for other products by Buffalo.

wzr-600dhp11 CVEs wzr-600dhp firmware11 CVEs wzr-1750dhp210 CVEs wzr-1750dhp2 firmware10 CVEs wzr-900dhp10 CVEs wxr-1900dhp29 CVEs wxr-1900dhp2 firmware9 CVEs wzr-600dhp29 CVEs

All Buffalo vulnerabilities

Frequently asked questions

Common questions about Buffalo wzr-900dhp firmware vulnerabilities.

How many CVEs does Buffalo wzr-900dhp firmware have?: Buffalo wzr-900dhp firmware has 10 published CVE records since 2016.
How many Buffalo wzr-900dhp firmware CVEs are in CISA KEV?: None of Buffalo wzr-900dhp firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Buffalo wzr-900dhp firmware vulnerabilities?: No Buffalo wzr-900dhp firmware CVEs currently have a tracked public exploit in this dataset.
Which versions of Buffalo wzr-900dhp firmware are affected?: 2 distinct Buffalo wzr-900dhp firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Buffalo wzr-900dhp firmware CVEs?: Buffalo wzr-900dhp firmware's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-306 (Missing Authentication for Critical Function), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
What is the average severity of Buffalo wzr-900dhp firmware CVEs?: The average CVSS base score across Buffalo wzr-900dhp firmware's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Buffalo wzr-900dhp firmware vulnerabilities

Monitor new Buffalo wzr-900dhp firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing