CVE-2026-21427: Pioneer Corporation Stellanova Aps-s301 Series

High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running installer.

Affected products

• Pioneer Corporation Stellanova Aps-s301 Series: any version
• Pioneer Corporation Stellanova Limited Aps-s202j-Lm: any version
• Pioneer Corporation Stellanova Lite Aps-s201jgl: any version
• Pioneer Corporation Stellanova Lite Aps-s201jgr: any version
• Pioneer Corporation Stellanova Lite Aps-s201jr: any version
• Pioneer Corporation Stellanova Lite Aps-s201js: any version
• Pioneer Corporation USB Dac Amplifier Aps-DA101JGL: any version
• Pioneer Corporation USB Dac Amplifier Aps-DA101JGR: any version
• Pioneer Corporation USB Dac Amplifier Aps-DA101JR: any version
• Pioneer Corporation USB Dac Amplifier Aps-DA101JS: any version

Published 2026-01-08. Last modified 2026-06-17.