CVE Catalog

CVE-2026-41226

MediumCVSS 4.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

22th percentile - higher than 22% of all known CVEs

Summary

An open redirect vulnerability exists in multiple laser printers and MFPs implementing Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Risk Assessment

The risk is that users can be tricked into phishing attacks, potentially leading to credential theft or other sensitive information disclosure. The organization may suffer reputational and financial damage.

Recommendation

It is recommended to update the device firmware to a version that fixes the open redirect vulnerability. Also, inform users about the threat and encourage caution when clicking links.

Other vulnerabilities in Ricoh Web Image Monitor

Original NVD description (English source)

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS