CVE-2026-24466

Publication date

2026-02-09 06:59:30

Family

jpcert

State

PUBLISHED

Description

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.