Medium severity6.7NVD Advisory· Published Feb 9, 2026· Updated Apr 15, 2026

CVE-2026-24466

Description

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jp.ricoh.com/security/products/vulnerabilities/vulnvd
jvn.jp/en/jp/JVN55395471/nvd
www.muratec.jp/ce/support/announce_sp_20260209.htmlnvd
www.oki.com/jp/printing/support/important-information/2026/info-260209/index.htmlnvd
www.oki.com/jp/product_security/sa_2026_0001_en.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000