Yamaha Corporation has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 7.1 (high), with 1 rated critical. None have a confirmed exploitation report. Most affected products: NWR100 (2), VOCALOID6 Editor (1), YMS-VPN8 (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Products
- NWR100 2
- VOCALOID6 Editor 1
- YMS-VPN8 1
- Yamaha LAN Monitor for Windows 1
Worst active — by depth score
CVE-2026-97854Critical· 9.8Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability54CVE-2026-103665High· 7.8The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs)43CVE-2026-104679High· 7.1VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references39CVE-2026-97860Medium· 6.7YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths37CVE-2026-109822Medium· 6.5Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information36
Yamaha Corporation vulnerabilities
CVEs affecting Yamaha Corporation, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-97860Medium· 6.7YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
CVE-2026-103665High· 7.8The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs)
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL m…
CVE-2026-97854Critical· 9.8Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
CVE-2026-109822Medium· 6.5Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.
CVE-2026-104679High· 7.1VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensit…