{"id":"CVE-2026-97860","title":"YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths","summary":"YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.","severity":"medium","cvss":6.7,"cvssVector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-428"],"vendor":"Yamaha Corporation","product":"YMS-VPN8","affected":["YMS-VPN8 <= Ver.1.04.00","YMS-VPN8-CP <= Ver.1.04.00"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-29T14:11:53.739786Z"},"published":"2026-10-29","updated":"2026-10-29","sourceUpdated":"2026-10-29T14:12:18.004Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97860","references":[{"url":"https://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN30675482.html"},{"url":"https://jvn.jp/en/jp/JVN30675482/"}],"tags":["cve.org"],"epss":0.00192,"epssPercentile":0.08885,"ingestedAt":"2026-11-01T20:00:16.936Z","slug":"CVE-2026-97860","body":"## Overview\n\nYMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.\n\n## Affected\n\n- `YMS-VPN8 <= Ver.1.04.00`\n- `YMS-VPN8-CP <= Ver.1.04.00`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":36.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}