CVE-2026-58315

MEDIUM

Seiko Epson Corporation Web Config - Cross-Site Request Forgery (CSRF)

Title source: rule

Description

Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed.

References (2)

Core 2

Core References

https://www.epson.jp/news/info/a-security202607.htm

https://jvn.jp/en/jp/JVN87285119/

Scores

CVSS v3 4.3

EPSS 0.0010

EPSS Percentile 1.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-352

Status published

Products (1)

SEIKO EPSON CORPORATION/Web Config See the information/details provided by the vendor

Published Jul 07, 2026

Tracked Since Jul 07, 2026