CVE-2026-64940 is a security vulnerability in the Tegalog -Fumy Otegaru Memo Logger- product by Nishishi Factory. The issue arises from a permissive regular expression used in the product, which can be exploited by an attacker who can access the affected product to gain unauthorized login to the management console. Successful exploitation allows the attacker to perform any operations accessible through the management console. The vulnerability has a CVSS 3.1 base score of 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability.

An attacker who can access the affected product may log in to the management console without authorization and perform any management operations. This can lead to unauthorized control over the product, potentially compromising confidentiality, integrity, and availability of the system. The CVSS score of 8.6 reflects a high impact, particularly on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should monitor Nishishi Factory advisories for updates and apply any patches or mitigations once available.