CVE-2026-56809

Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL.

Score

CVSS 3.0 6.1 Medium

Status

Deferred - vultures@jpcert.or.jp

Published

2026-06-30

Last modified

2026-10-25

Weaknesses

CWE-79

Affected products

• Multiple Mfps Which Implement Ricoh Web Image Monitor (Konica Minolta Japan Inc.)
• Multiple Laser Printers And Mfps Which Implement Ricoh Web Image Monitor (Ricoh Company Ltd.)

References

• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2026-000005
• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000005
• https://www.konicaminolta.jp/business/support/important/260831_01_01.html
• https://jvn.jp/en/jp/JVN48718197/