CVE-2026-24466

Impact

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000002
• https://jvn.jp/en/jp/JVN55395471/
• https://www.muratec.jp/ce/support/announce_sp_20260209.html
• https://www.oki.com/jp/printing/support/important-information/2026/info-260209/index.html
• https://www.oki.com/jp/product_security/sa_2026_0001_en.html