Arbitrary Code Execution Risk in Yamaha LAN Monitor Installer
CVE-2026-103665

8.4HIGH

Key Information:

Vendor

Yamaha Corporation

Status
Yamaha Lan Monitor For Windows
Vendor
CVE Published:
29 October 2026

What is CVE-2026-103665?

The installer for Yamaha LAN Monitor for Windows has a vulnerability that allows it to improperly load Dynamic Link Libraries (DLLs). If an attacker places a malicious DLL in the directory from which the installer is run, this can result in arbitrary code execution with administrative privileges. This situation poses a significant security risk, as it may enable attackers to execute unauthorized actions on the affected system.

Affected Version(s)

Yamaha LAN Monitor for Windows 0

References

https://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN2369523...
https://jvn.jp/en/jp/JVN23695234/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.