Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to exec

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yamaha Corporation YMS-VPN8

Default version status: unaffected

  • 0 to ≤ Ver.1.04.00affected

Yamaha Corporation YMS-VPN8-CP

Default version status: unaffected

  • 0 to ≤ Ver.1.04.00affected

References