Missing Authentication Vulnerability in Pantum BP5100DW Printer Web Interface
CVE-2026-124578

6.9MEDIUM

Key Information:

Vendor

Pantum

Status
Bp5100dw
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124578?

A significant vulnerability has been identified in the Pantum BP5100DW Printer's web interface, specifically affecting the file /shtml/omDB.shtml. This security issue arises from the absence of proper authentication mechanisms, allowing remote attackers to exploit this flaw. As a result, unauthorized users may gain access to sensitive device configuration and credentials. Despite early disclosure attempts to the vendor, there has been no response, underscoring the urgency for users to be vigilant and implement necessary security measures.

Affected Version(s)

BP5100DW 3.A.4.7

References

https://vuldb.com/vuln/432924
vdb-entry
https://vuldb.com/vuln/432924/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-124578
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JoasHS (VulDB User)
VulDB CNA Team
.