CVE-2026-81310
6.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Summary
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.0.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.1.0 <= 2.1.1 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.3.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.5.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.7.0 <= 2.7.1 | affected |
| PFU Limited | Image Scanner Driver for Linux (fi Series) | 2.8.0 <= 2.8.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.0.0 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.1.0 <= 2.1.1-4 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.2.0 <= 2.2.2 | affected |
| PFU Limited | Image Scanner Driver for Linux (SP Series) | 2.3.0 | affected |
Weaknesses
- CWE-59: Improper link resolution before file access ('Link Following')
References
- https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html
- https://jvn.jp/en/vu/JVNVU96968110/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.