CVE-2026-78229
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Summary
Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.0.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.1.0 <= 2.1.1 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.3.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.5.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.7.0 <= 2.7.1 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.8.0 <= 2.8.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.0.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.1.0 <= 2.1.1-4 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.2.0 <= 2.2.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.3.0 | affected |
Weaknesses
- CWE-78: Improper neutralization of special elements used in an OS command ('OS Command Injection')
References
- https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html
- https://jvn.jp/en/vu/JVNVU96968110/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.