CVE-2026-97860highCWE-428

CVE-2026-97860: high-severity vulnerability in Yamaha Corporation YMS-VPN8

Published

Follow this CVE+ Monitor YMS-VPN8+ Monitor YMS-VPN8-CP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 0.2%
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Yamaha Corporation · YMS-VPN8Yamaha Corporation · YMS-VPN8-CP