Path Traversal Vulnerability in Multifunction Devices and Printers by Fujifilm and Sharp
CVE-2026-78249

6.8MEDIUM

Key Information:

Vendor

Fujifilm Business Innovation Corp.

Status
Apeos 3060 / 2560 / 1860 Japan Model
Apeos 3061 / 2561 / 2061 Japan Model
Apeos 4570 / 3570 Japan Model
Apeos 5330 Japan Model
Vendor
CVE Published:
1 October 2026

What is CVE-2026-78249?

A path traversal vulnerability has been identified within the web management interface of several multifunction devices and printers. This flaw lies in how external parameters are handled, allowing an attacker to send a crafted malicious request. If exploited, this could lead to unintended processing of sensitive information, posing significant security risks to the device and the network it operates within. It is crucial for users to apply recommended patches and security updates to mitigate potential threats.

Affected Version(s)

Apeos 3060 / 2560 / 1860 Japan model 1.50.5 or earlier

Apeos 3061 / 2561 / 2061 Japan model 1.0.3 or earlier

Apeos 3560 / 3060 / 2560 Asia Pacific model 1.50.5 or earlier

References

https://www.fujifilm.com/fb/en/news/15736e
https://global.sharp/corporate/info/product-security/advi...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.