Image Scanner Driver For Linux (sp Series) CVEs and Security Vulnerabilities

CVE-2026-78229

OS Command Injection in PFU Image Scanner Driver for Linux

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pfu Limited

Products

Image Scanner Driver For Linux (fi Series) Image Scanner Driver For Linux (sp Series)

CVE-2026-81310

Link Following Vulnerability Allowing Arbitrary File Overwrite in PFU Image Scanner Driver for Linux

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed