Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109822

Quick assessment

Affected
Yamaha Corporation NWR100
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

雅马哈公司提供的 Yamaha NWR100 无线局域网路由器存在敏感信息存储不安全的漏洞。通过 CONFIG 文件导出功能生成的配置文件可能被未认证的攻击者读取。

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1538 · Cloud Service Dashboard
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109822

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感信息的不安全存储
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Yamaha Corporation NWR100 0 ~ Rev.26.00.07 -

II. Public POCs for CVE-2026-109822

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109822

请登录查看更多情报信息。

Other References for CVE-2026-109822 (2)

Same Patch Batch · Yamaha Corporation · 2026-10-29 · 4 CVEs total

CVE-2026-97854 9.8 CRITICAL 雅马哈 NWR100 路由器存在 OS 命令注入漏洞
CVE-2026-103665 8.4 HIGH Yamaha LAN Monitor 安装程序 DLL 加载漏洞
CVE-2026-97860 8.4 HIGH Yamaha YMS-VPN8 未加引号服务路径提权漏洞

IV. Related Vulnerabilities

Same product: NWR100
Same vendor: Yamaha Corporation
Same weakness: CWE-922