CVE-2026-44387 is a reflected XSS vulnerability in the WebUI of ELECOM CO.,LTD. WAB-M1775-PS wireless LAN routers and access points. This vulnerability allows an attacker to execute arbitrary scripts in the context of a logged-in user's browser by reflecting malicious input in the web interface. The CVSS 3.0 vector indicates the attack requires adjacent network access, low attack complexity, no privileges, and user interaction, with partial impact on confidentiality and integrity but no impact on availability. No vendor advisory or patch information is currently available.

Exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the browser of a logged-in user, potentially leading to partial disclosure or modification of sensitive information accessible through the WebUI. There is no indication of impact on system availability. The attack requires user interaction and access to the adjacent network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid interacting with untrusted links or inputs while logged into the device's WebUI. Monitor official ELECOM communications for updates on patches or mitigations.