critical CVE-2026-109422
NetEase Cloud Music client for Windows (cloudmusic.exe): Code execution possible
NVD (NIST) reports one vulnerability in NetEase Cloud Music client for Windows (cloudmusic.exe) with severity critical. The stated impact is code execution. Affected: CVE-2026-109422. The full description, affected versions and recommended action are available from NVD (NIST).
- Attack vector
- over the network
- CVSS
- 9.2
What this means for you
An attacker can run their own code on the system. The first question is reachability from the internet. If it is given, the update belongs ahead of the regular maintenance window.
Original source
Insights
More articles
Weekly situation, week 42: 107 advisories, 17 critical
Between 11 Oct and 18 Oct 2026 our sources recorded 107 advisories: 17 critical, 90 high.
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Weekly situation, week 40: 80 advisories, 16 critical
Between 27 Sep and 4 Oct 2026 our sources recorded 80 advisories: 16 critical, 64 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.