CVE-2026-41226

MEDIUM

Ricoh Company, Ltd. Multiple Laser Printers And MFPs Which Implement Web Image Monitor - Open Redirect

Title source: rule

Description

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

References (3)

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2026-000004

https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000004

https://jvn.jp/en/jp/JVN65118274/

Scores

CVSS v3 6.1

EPSS 0.0003

EPSS Percentile 8.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-601

Status published

Products (1)

Ricoh Company, Ltd./Multiple laser printers and MFPs which implement Web Image Monitor see the information provided by the vendor

Published Apr 30, 2026

Tracked Since Apr 30, 2026