CVE-2026-26050

Summary

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.

Affected Software

VendorProductVersion RangeStatus
Ricoh Company, Ltd.ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツールversions prior to Ver.1.3.7affected

Weaknesses

  • CWE-427: Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References