CVE-2026-24466CWE-428

Products provided by Oki Electric Industry Co., Ltd

High · published February 9, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-09T06:59Z
EPSS history
Timeline
  • 09 FEB 06:59Z
    Products provided by Oki Electric Industry Co., Ltd
    cvelistv5