CVE-2026-97854
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection…
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The Yamaha wireless LAN router NWR100 has an OS command injection vulnerability, allowing arbitrary OS commands to be executed by sending a specially crafted request.
- Affected
- {'product': 'Yamaha wireless LAN router NWR100', 'vendor': 'Yamaha Corporation'}
- Fix
- Check the linked advisory for a fix, as none is provided in the record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
Last activity 29 Oct 2026. Patch Forecast updates every hour.