Is CVE-2026-109822 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-109822 being exploited in the wild.

How severe is CVE-2026-109822?

Medium severity, with a CVSS score of 6.5, published 29 October 2026.

Which products and versions are affected?

Yamaha NWR100 Rev.26.00.07 and earlier.

How is CVE-2026-109822 attacked?

It is attacked over the network.

Am I affected by CVE-2026-109822?

Check whether you run Yamaha NWR100 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-109822: Yamaha NWR100 insecure storage of sensitive information

CVE-2026-109822 · Severity: medium · CVSS 6.5 · Published 2026-10-29

Yamaha's NWR100 wireless LAN router stores configuration files insecurely, allowing unauthenticated attackers to read exported configuration data that may contain sensitive information. An attacker with network access to the device's web interface can download configuration files without authentication, potentially exposing network credentials and settings used to manage the router.

Vendors: Yamaha.

Quick answers

Is CVE-2026-109822 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-109822 being exploited in the wild.
How severe is CVE-2026-109822?: Medium severity, with a CVSS score of 6.5, published 29 October 2026.
Which products and versions are affected?: Yamaha NWR100 Rev.26.00.07 and earlier.
Is there a fix for CVE-2026-109822?: Yes: fixed in Rev.26.00.08. Until then: Restrict access to the web GUI by configuring IP filters and access controls to limit which devices and source addresses can reach the management interface. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-109822 attacked?: It is attacked over the network.
Am I affected by CVE-2026-109822?: Check whether you run Yamaha NWR100 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Rev.26.00.08

Restrict access to the web GUI by configuring IP filters and access controls to limit which devices and source addresses can reach the management interface.

Technical details

The NWR100's CONFIG file export function generates configuration files that can be read by unauthenticated attackers due to insecure storage (CWE-922). The vulnerability requires network access to the web GUI but no authentication; user interaction may be involved in accessing or downloading the exported file. An attacker gains access to sensitive configuration data including network credentials.

Affected products

Yamaha NWR100 Rev.26.00.07 and earlier

Timeline

2026-10-28: disclosed
2026-10-29: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.