CVE-2026-64940

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from the management console.

Score

CVSS 4.0 8.8 High

Status

Deferred - vultures@jpcert.or.jp

Published

2026-08-10

Last modified

2026-10-24

Weaknesses

CWE-625

Affected products

• Tegalog -fumy Otegaru Memo Logger- (Nishishi Factory)

References

• https://www.nishishi.com/cgi/tegalog/info/notice20260629.shtml
• https://jvn.jp/en/jp/JVN99975039/