CVE 6.7 MEDIUM

CVE-2026-24466_CVE-2026-24466

6.7 / 10
MEDIUM
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

Basic Information

ID CVE-2026-24466
Source jpcert
Published Feb 9, 2026 at 06:59

Affected Product

Vendor Oki Electric Industry Co., Ltd.
Product See "References" section
Version See "References" section
Affected Versions Oki Electric Industry Co., Ltd. See "References" section See "References" section
Ricoh Company, Ltd. See "References" section See "References" section
Murata Machinery, Ltd. See "References" section See "References" section

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.