CVE-2026-109822

The Yamaha NWR100 wireless LAN router contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.

An unauthenticated attacker may obtain sensitive information contained in the router's configuration files, potentially facilitating further attacks on the network. The risk affects Yamaha NWR100 devices with the configuration export function available.

Update the Yamaha NWR100 router firmware to the vendor-fixed version and restrict access to the configuration export function.