CVE-2026-97854

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 1 mentions (2026-10-28); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-10-28: 1Mentions · 2026-10-29: 110-2810-29
Referenced assets1 URL
By indicator
Full discourse2 posts
  • インフォセキュアソリューションズ株式会社@InSecSol0417

    🚨【ヤマハNWR100に脆弱性】 CVE-2026-97854(2026年10月28日公開)。不正な要求でOSコマンドを実行されるおそれ。 Rev.26.00.07以前は26.00.08へ更新し、Web管理画面へのアクセス元も制限を。 #ヤマハ #脆弱性 #企業公式相互フォロー

    100190345
    628 followersView on X
  • AIセキュリティ観測所@tsgxxm

    【新規・重大】ヤマハ NWR100の脆弱性 JVNVU#91027179
ヤマハ製NWR100における複数の脆弱性 https://jvn.jp/vu/JVNVU91027179/?utm_source=chatgpt.com CVE-2026-97854 9.8 / 10 CVSS v3.1 深刻度スコア #ヤマハ #NWR100 #脆弱性 #サイバーセキュリティ #情報セキュリティ #CVE #ルーター #中小企業 #サイバー攻撃 #セキュリティ対策

    0001081
    2.4K followersView on X

Explore more