CVE-2026-76131: Yamaha Corporation VOCALOID6

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALOID6 Editor and gain access to Yamaha's activation and content servers.

Affected products

• Yamaha Corporation VOCALOID6: up to and including 6.13.0

Published 2026-08-21. Last modified 2026-08-31.