What’s Vulnerable › Vulnerabilities

CVE-2026-58315

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-07 · updated 2026-10-25
• Weakness: CWE-352

Description

Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed.

Affected products

• SEIKO EPSON CORPORATION Web Config: See the information/details provided by the vendor

References

• https://jvn.jp/en/jp/JVN87285119/
• https://www.epson.co.uk/en_GB/faq/KA-02075/contents?loc=en-us&ot_preferences=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1&adobe_mc=MCMID%3D92155711048749840274153414272266649988%7CMCORGID%3DC6DD45815AE6DFFD0A495D24%40AdobeOrg%7CTS%3D1784703080

Get alerted when CVE-2026-58315 or the next vulnerability affects your stack