CVE-2026-20704 is a CSRF vulnerability affecting ELECOM CO.,LTD.'s WRC-X1500GS-B wireless LAN product versions 1.12 and earlier. The vulnerability allows an attacker to induce a logged-in user to perform unintended actions by tricking them into visiting a malicious webpage. The CVSS 3.0 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and limited impact on integrity without confidentiality or availability impact. No patch or official remediation information is provided in the available data.

Successful exploitation could lead to unintended operations performed on the affected device by an authenticated user. The impact is limited to integrity with no confidentiality or availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid visiting untrusted or suspicious websites while logged into the affected device. Monitor vendor communications for updates on patches or mitigations.