Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-97860

Yamaha YMS‑VPN8 Unquoted Service Path Enabling Local SYSTEM Privilege Escalation

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Yamaha
Products
Yms-vpn8 Yms-vpn8-cp