CVE-2026-97854EUVD-2026-112753GHSA-8M66-F8M4-WC2J
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability.
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Yamaha NWR100 wireless LAN router, made by Yamaha Corporation, is affected by this vulnerability. An attacker could send a specially crafted request to the device and run arbitrary operating system commands on it.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
Affected versions
- Yamaha Corporation NWR100
through Rev.26.00.07