6.7
/ 10
MEDIUM
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Basic Information
ID
CVE-2026-24466
Source
jpcert
Published
Feb 9, 2026 at 06:59
Affected Product
Vendor
Oki Electric Industry Co., Ltd.
Product
See "References" section
Version
See "References" section
Affected Versions
Oki Electric Industry Co., Ltd. See "References" section See "References" section
Ricoh Company, Ltd. See "References" section See "References" section
Murata Machinery, Ltd. See "References" section See "References" section
Ricoh Company, Ltd. See "References" section See "References" section
Murata Machinery, Ltd. See "References" section See "References" section