CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

CVSS

No CVSS.

References

Link	Resource
https://global.sharp/corporate/info/product-security/advisory-list/2026-006/
https://www.fujifilm.com/fb/en/news/15736e

Configurations

No configuration.

History

01 Oct 2026, 08:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-01 08:16

Updated : 2026-10-01 16:17

NVD link : CVE-2026-78249

Mitre link : CVE-2026-78249

CVE.ORG link : CVE-2026-78249

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-78249", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-78249", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-01T15:30:34.746566Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "47e4fddc-a2f1-48a0-beab-943c84c1c954", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "47e4fddc-a2f1-48a0-beab-943c84c1c954", "affectedData": [{"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3060 / 2560 / 1860 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3061 / 2561 / 2061 Japan model", "versions": [{"status": "affected", "version": "1.0.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 4570 / 3570 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 5330 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 6340 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 7580 / 6580 / 5580 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C2360 / C2060 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3061 / C2561 / C2061 Japan model", "versions": [{"status": "affected", "version": "1.1.103 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3567 / C3067 / C2567 Japan model", "versions": [{"status": "affected", "version": "1.1.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C4030/C3530 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C5240 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model", "versions": [{"status": "affected", "version": "1.1.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C8180 / C7580 / C6580 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 4560 S / 3960 S / 3360 S Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 4830 / 4830 JM Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 6340 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C3560 S / C3060 S Japan model", "versions": [{"status": "affected", "version": "1.20.105 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C4030 / C3530 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C5240 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C5570 / C4570 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPro C810 / C750 / C650 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press E1136 / E1125/ E1110 / E1100 Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press E1136P/E1125P/E1110P Japan model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC1100 Japan model", "versions": [{"status": "affected", "version": "1.22.11 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC2100S / EC2100 Japan model", "versions": [{"status": "affected", "version": "1.1.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press SC285S / SC285 Japan model", "versions": [{"status": "affected", "version": "1.1.0 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "RevoriaPress SC180 / SC170 Japan model", "versions": [{"status": "affected", "version": "1.23.6 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3560 / 3060 / 2560 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3561 / 3061 / 2561 Asia Pacific model", "versions": [{"status": "affected", "version": "1.0.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 5330 / 4830 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 5570 / 4570 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 6340 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 7580 / 6580 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3060 / C2560 / C2060 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3061 / C2561 / C2061 Asia Pacific model", "versions": [{"status": "affected", "version": "1.1.103 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3567 / C3067 / C2567 Asia Pacific model", "versions": [{"status": "affected", "version": "1.1.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C4030/C3530 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C5240 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific model", "versions": [{"status": "affected", "version": "1.1.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C8180 / C7580 / C6580 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 5330 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 6340 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C4030 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C5240 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C5570 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPro C810 / C750 / C650 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific model", "versions": [{"status": "affected", "version": "1.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC1100 Asia Pacific model", "versions": [{"status": "affected", "version": "1.22.11 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC2100S / EC2100 Asia Pacific model", "versions": [{"status": "affected", "version": "1.1.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press SC285S / SC285 Asia Pacific model", "versions": [{"status": "affected", "version": "1.1.0 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "RevoriaPress SC180 / SC170 Asia Pacific model", "versions": [{"status": "affected", "version": "1.23.6 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3561 / 3061 / 2561 Europe model", "versions": [{"status": "affected", "version": "1.0.3 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 5330/4830 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 5570/4570 Europe model", "versions": [{"status": "affected", "version": "21.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C3060 / C2560 / C2060 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos 3560 / 3060 / 2560 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C4030/C3530 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 Europe model", "versions": [{"status": "affected", "version": "21.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint 5330/4830 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPrint C4030/C3530 Europe model", "versions": [{"status": "affected", "version": "21.50.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "ApeosPro C810 / C750 / C650 Europe model", "versions": [{"status": "affected", "version": "21.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press E1136 / E1125 / E1110 /E1100 Europe model", "versions": [{"status": "affected", "version": "21.50.5 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC1100 Europe model", "versions": [{"status": "affected", "version": "21.1.6 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press EC2100S / EC2100 Europe model", "versions": [{"status": "affected", "version": "21.1.4 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "Revoria Press SC285S / SC285 Europe model", "versions": [{"status": "affected", "version": "21.1.0 or earlier"}], "defaultStatus": "unaffected"}, {"vendor": "Fujifilm Business Innovation Corp.", "product": "RevoriaPress SC180 / SC170 Europe model", "versions": [{"status": "affected", "version": "21.1.4 or earlier"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-01T08:16:52.930", "references": [{"url": "https://global.sharp/corporate/info/product-security/advisory-list/2026-006/", "source": "47e4fddc-a2f1-48a0-beab-943c84c1c954"}, {"url": "https://www.fujifilm.com/fb/en/news/15736e", "source": "47e4fddc-a2f1-48a0-beab-943c84c1c954"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "47e4fddc-a2f1-48a0-beab-943c84c1c954", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. \n\nIf the device receives a specially crafted, malicious request, it may trigger unintended processing."}], "lastModified": "2026-10-01T16:17:59.643", "sourceIdentifier": "47e4fddc-a2f1-48a0-beab-943c84c1c954"}

CVE-2026-78249

JSON object

Attach tags to CVE-2026-78249

Attach tags to `CVE-2026-78249`