CVE-2026-41226
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An open redirect vulnerability exists in multiple laser printers and MFPs implementing Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.
Risk Assessment
The risk is that users can be tricked into phishing attacks, potentially leading to credential theft or other sensitive information disclosure. The organization may suffer reputational and financial damage.
Recommendation
It is recommended to update the device firmware to a version that fixes the open redirect vulnerability. Also, inform users about the threat and encourage caution when clicking links.
Other vulnerabilities in Ricoh Web Image Monitor
Original NVD description (English source)
Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

