CVE-2026-97860
CVSS Score
6.7
EPSS Score
0.0%
EPSS Percentile
0th
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
| Vendor | yamaha corporation |
| Product | yms-vpn8 |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for yamaha corporation yms-vpn8
Be the first to know when new medium vulnerabilities affecting yamaha corporation yms-vpn8 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Versions
Yamaha Corporation / YMS-VPN8
0 ≤ Ver.1.04.00
Yamaha Corporation / YMS-VPN8-CP
0 ≤ Ver.1.04.00