Ricoh printers and Multifunction Printers (MFPs) missing restriction on SSH port forwarding

Overview Some series of printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. provide SSH service, but no restriction is implemented on SSH port forwarding. Improper restriction of communication channel to intended endpoints CWE-923 - CVE-2026-63226 Brandon Roach and Bryan...

EUVD-2026-47876

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

CVE-2026-63226

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

CVE-2026-63226

CVE-2026-63226 affects Ricoh Printers and MFPs. The issue is lack of restrictions on SSH port forwarding, enabling SSH port forwarding to reach arbitrary destinations on the LAN when SSH is enabled on the affected product. The connected documents provide the vulnerability description and CVSS met...

CVE-2026-63226

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

CVE-2026-63226

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

PT-2026-63569

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Overview Web Image Monitor provided by Ricoh Company, Ltd. is a web server that is included in and runs on laser printers and MFPs multifunction printers. Web Image Monitor contains the vulnerability listed below. Reflected cross-site scripting CWE-79 - CVE-2026-56809 Tomasz Holeksa of Pentest...

CVE-2026-56809

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL...

CVE-2024-39927

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service DoS condition and/or user's data may be destroyed...

EUVD-2019-5526

Malware in sbrugna...

EUVD-2019-5535

Malware in sbrugna...

EUVD-2019-5534

Malware in sbrugna...

EUVD-2019-5532

Malware in sbrugna...

EUVD-2019-5527

Malware in sbrugna...

EUVD-2019-5530

Malware in sbrugna...

EUVD-2025-14317

Malicious code in bioql PyPI...

RICOH Printers XSS Vulnerability (ricoh-2025-000001)

Multiple RICOH printers and multifunction printers are prone to a cross-site scripting XSS vulnerability via the Web Image Monitor. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2025-41393

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...