Improper XML External Entity Processing in VOCALOID6 Editor by Yamaha Corporation

CVE-2026-104679

What is CVE-2026-104679?

The VOCALOID6 Editor by Yamaha Corporation has a vulnerability related to improper handling of XML external entity references. This flaw allows an attacker to craft a malicious project file that, when loaded, could lead to unintended communication with external systems. Such exploitation risks exposing sensitive information from the device where the software is installed, potentially resulting in severe data breaches. Additionally, the vulnerability could cause a denial-of-service (DoS) situation, disrupting the normal operation of the affected system.

References