Approved changes feed: RSS · Atom

cpe:2.3:a:yamaha_corporation:yms-vpn8:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYamaha Corporation (ed46b590-c224-5753-9688-1432e3e10833)
ProductYms Vpn8 (3b5422fa-5a22-585a-b015-49c05b02422e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-97860 vulnerable 2026-11-03 10:15:26.856677 Details available
MEDIUM (6.7)
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
Published: 2026-10-29T11:33:10.955Z
Updated: 2026-10-29T14:12:18.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.