Search vulnerabilities

Results 2

Export CSV
CVE-2026-63226

SSH Port Forwarding Allowed to Arbitrary Destinations in Ricoh Printers and MFPs

Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-24466

Unquoted Windows Service Path Enables SYSTEM‑Privilege Exploitation on Oki Electric and OEM Printers

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed