CVE-2026-26050

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.

Score

CVSS 4.0 8.4 High

Status

Deferred - vultures@jpcert.or.jp

Published

2026-02-20

Last modified

2026-02-20

Weaknesses

CWE-427

Affected products

• Ricoh (Ricoh Company Ltd.)

References

• https://jvn.jp/en/jp/JVN69531868/
• https://support.ricoh.com/bbv2/html/dr_ut_d/ut/history/w/bb/pub_j/dr_ut_d/4101031/4101031555/V137/5260588/260588/histor…