PT-2026-2059 · Pioneers · Pioneer Corporation Installers

Kazuma Matsumoto · Published 2026-01-08 · Updated 2026-01-08 · CVE-2026-21427

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PIONEER CORPORATION installers (affected versions not specified)

Description The installers for multiple products provided by PIONEER CORPORATION have a flaw in how they handle Dynamic Link Library (DLL) search paths. This can result in the loading of insecure DLLs, potentially allowing for the execution of arbitrary code with the privileges of the running installer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-21427

Affected Products

Pioneer Corporation Installers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-21427 · Security Note
• https://jvn.jp/en/jp/JVN17956874 · Note
• https://t.me/CVEtracker/41677 · Telegram Post
• https://twitter.com/CVEnew/status/2009149971338236237 · Twitter Post
• https://jpn.pioneer/ja/support/software/stellanova/dac_driver · Note