CVE-2026-56809

MediumCVSS 6.1

Published: 30/06/2026(UTC)Updated: 25/10/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Multiple laser printers and MFPs implementing Ricoh Web Image Monitor are vulnerable to reflected cross-site scripting (XSS). An attacker can execute arbitrary scripts in the victim's browser by tricking them into clicking a crafted URL.

Risk Assessment

The risk includes session hijacking, credential theft, or unauthorized actions performed in the victim's session context, potentially compromising data confidentiality and integrity within the organization.

Recommendation

Immediately update the device firmware to a version that includes the XSS fix. Until the update is applied, restrict access to the Web Image Monitor interface to trusted networks only.

Other vulnerabilities in Ricoh Web Image Monitor

CVE-2026-41226Medium
An open redirect vulnerability exists in multiple laser printers and MFPs implementing Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Original NVD description (English source)

Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS