CVE-2026-97860
CVE-2026-97860
This page contains facts from public vulnerability sources. Check the original advisory before updating.
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
CVSS 8.4 · High · EPSS 0.2%
- Published
- Updated
Affected products and versions
yms-vpn8
- Versions
- ≥ 0, ≤ Ver.1.04.00: Affected (semver)
No fix published
yms-vpn8-cp
- Versions
- ≥ 0, ≤ Ver.1.04.00: Affected (semver)
No fix published