Critical severity9.8NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-97854

Description

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

Affected products

Yamaha Corporation/wireless LAN router NWR100llm-create

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU91027179/nvd
www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91027179.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000