CVE-2026-97860

6.7 MEDIUM

Published 2026-10-29 · Updated 2026-10-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-428

All references

https://jvn.jp/en/jp/JVN30675482/
https://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN30675482.html

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-15358
HIGHCVE-2026-18755
HIGHCVE-2026-57223PoC
MEDIUMCVE-2026-66839
HIGHCVE-2026-81469

Related by shared AI tags and CWE weakness class. Browse the full archive.