p PatchFirst

CVE-2026-97854

CVE-2026-97854

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

CVSS 9.3 · Critical · EPSS 1.4%

Published
Updated

Affected products and versions

  • nwr100

    Versions
    • ≥ 0, ≤ Rev.26.00.07: Affected (semver)

    No fix published

Original sources

Check your server →