PT-2026-132104

CVE-2026-97860

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-428: Unquoted Search Path or Element
Related identifiers
CVE-2026-97860
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com