CVE-2026-97854

CVSS 9.8 (critical) · published 2026-10-29

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

Weakness: CWE-78

Source: NVD CVE-2026-97854

References

• https://jvn.jp/en/vu/JVNVU91027179/
• https://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91027179.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.