CVE-2026-78249CWE-22path-traversal

CVE-2026-78249

published October 1, 2026

CVSS
6.8
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.

If the device receives a specially crafted, malicious request, it may trigger unintended processing.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
6.8 · CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-10-01T12:16Z
References (2)
https://global.sharp/corporate/info/product-security/advisory-list/2026-006/ · 47e4fddc-a2f1-48a0-beab-943c84c1c954https://www.fujifilm.com/fb/en/news/15736e · 47e4fddc-a2f1-48a0-beab-943c84c1c954
EPSS history
Timeline
  • 03 OCT 03:46Z
    EPSS moved — → 0%
    epss
  • 01 OCT 07:56Z
    A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier…
    cvelistv5