01 Record

CVE-2026-76137

Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via

MediumPUBLISHEDCNA: jpcert

Base score4.8 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via

03 Metadata

Published

2026-08-21 02:02Z23 HR AGO

Last updated

2026-08-21 12:54Z12 HR AGO

Reserved

2026-08-20

Assigning CNA

jpcert

Record state

PUBLISHED

Severity

Medium (CVSS 4.8)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Weaknesses

CWE-306Missing Authentication for Critical FunctionBase

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

46fdeef6fdbb0487f44aeb558dd86ea1f0151d0dc718d698eb5bd3a0a772ed82

04 Affected products

VendorProductVersionsPlatforms

Yamaha CorporationVOCALOID60 to 6.13.1—

05 References

www.vocaloid.comhttps://www.vocaloid.com/en/support/download/
jvn.jphttps://jvn.jp/en/vu/JVNVU90210212/

01 Record