What’s Vulnerable › Vulnerabilities

CVE-2026-23767

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-05 · updated 2026-06-17
• Weakness: CWE-306

Description

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

Affected products

• Epson Sb-H50 Firmware: all versions
• Epson Tm-H6000V Firmware: all versions
• Epson Tm-L100 Firmware: all versions
• Epson Tm-M10 Firmware: all versions
• Epson Tm-M30 Firmware: all versions
• Epson Tm-M30Ii-H Firmware: all versions
• Epson Tm-M30Ii-S Firmware: all versions
• Epson Tm-M30Ii-Sl Firmware: all versions
• Epson Tm-M30Ii Firmware: all versions
• Epson Tm-M30Iii-H Firmware: all versions
• Epson Tm-M30Iii Firmware: all versions
• Epson Tm-M55 Firmware: all versions
• Epson Tm-P20 Firmware: all versions
• Epson Tm-P20Ii Firmware: all versions
• Epson Tm-P60Ii Firmware: all versions
• Epson Tm-P80 Firmware: all versions
• Epson Tm-P80Ii Firmware: all versions
• Epson Tm-T20Ii Firmware: all versions
• Epson Tm-T20Iii Firmware: all versions
• Epson Tm-T88Vi-Ihub Firmware: all versions
• Epson Tm-T88Vi Firmware: all versions
• Epson Tm-T88Vii Firmware: all versions
• Epson Ub-E04 Firmware: all versions
• Epson Ub-R04 Firmware: all versions

References

• https://download4.epson.biz/sec_pubs/bs/pdf/IP_Filtering_Guide_en_revA.pdf
• https://jvn.jp/en/ta/JVNTA97995322/
• https://www.epson.jp/support/misc_t/260305_oshirase.htm

Get alerted when CVE-2026-23767 or the next vulnerability affects your stack