CVE-2026-24466

EUVD-2026-6916
Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
6.7 MEDIUM
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Common Weakness Enumeration
References
https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000002
https://jvn.jp/en/jp/JVN55395471/
https://www.muratec.jp/ce/support/announce_sp_20260209.html
https://www.oki.com/jp/printing/support/important-information/2026/info-260209/index.html
https://www.oki.com/jp/product_security/sa_2026_0001_en.html