Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-76137
Privilege Escalation via Local Named Pipe in VOCALOID6 Editor
CVE-2026-76131
Hard‑Coded Credentials in Yamaha VOCALOID6 Enable Server Access
CVE-2026-37100
Unauthenticated BLE Control Access on Yamaha SR-B30A Sound Bar
CVE-2024-48542
Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.
CVE-2024-22366
Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.05 and earlier, WLX212 firmware Rev.21.00.12 and earlier, WLX313 firmware Rev.18.00.12 and earlier, and WLX202 firmware Rev.16.00.18 and earlier.
