CVE-2026-64940 describes a security flaw in the Tegalog -Fumy Otegaru Memo Logger- product by Nishishi Factory. The vulnerability arises from a permissive regular expression used in the product, which can be exploited by an attacker who has access to the affected product to gain unauthorized login to the management console. This unauthorized access enables the attacker to execute any operations available through the management interface.

An attacker who can access the affected product may gain unauthorized administrative access to the management console, potentially allowing full control over the product's management functions. This could lead to unauthorized changes, data manipulation, or other high-impact actions. The CVSS v3.1 score is 8.6, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact on confidentiality (low), integrity (high), and availability (low).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.