CVE-2025-46783

Severity: critical (CVSS 9.3 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-13 · updated 2026-06-17
Weakness: CWE-22

Description

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.

Affected products

Ricoh Company, Ltd. RICOH Streamline NX V3 PC Client: from versions 3.5.0 through 3.242.0

References

https://jvn.jp/en/jp/JVN27937557/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000005

Get alerted when CVE-2025-46783 or the next vulnerability affects your stack