CVE-2026-109822
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Oct 29, 2026
CISA due date
—
The record
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61728 SOCFortress CoPilot focuses on providing a single pane of glass for all your security… CWE-922
- CVE-2026-118568 Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync… CWE-922
- CVE-2026-118551 Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial… CWE-922
- CVE-2026-87951 Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service… CWE-922
- CVE-2026-91477 Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). CWE-922
- CVE-2026-44629 Improper access control to the Synergis Softwire installation folder. CWE-922
- CVE-2026-20705 Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R)… CWE-922
- CVE-2026-47362 In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed… CWE-922