CVE-2026-103665

Quick assessment

Affected

Yamaha Corporation Yamaha LAN Monitor for Windows

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

雅马哈公司（Yamaha Corporation）提供的 Windows 版 Yamaha LAN Monitor 安装程序可能存在动态链接库（DLL）加载不安全的问题。当安装程序在包含特制 DLL 文件的目录中启动时，该恶意 DLL 可能被加载，从而导致以管理员权限执行任意代码。

CVSS 8.4 · High Updated Oct 29, 2026

Possible ATT&CK Techniques 2 AI

T1574 · Hijack Execution Flow T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

对搜索路径元素未加控制

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Yamaha Corporation	Yamaha LAN Monitor for Windows	0 ~ Ver.1.9.3	-

II. Public POCs for CVE-2026-103665

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-103665

请登录查看更多情报信息。

Other References for CVE-2026-103665 (2)

https://www.cve.org/CVERecord?id=CVE-2026-103665

Same Patch Batch · Yamaha Corporation · 2026-10-29 · 4 CVEs total

CVE-2026-97854	9.8 CRITICAL	雅马哈 NWR100 路由器存在 OS 命令注入漏洞
CVE-2026-97860	8.4 HIGH	Yamaha YMS-VPN8 未加引号服务路径提权漏洞
CVE-2026-109822	6.5 MEDIUM	雅马哈 NWR100 路由器敏感信息存储漏洞

IV. Related Vulnerabilities

Same vendor: Yamaha Corporation

Same weakness: CWE-427