CVE-2026-63226

Severity: medium (CVSS 6.9 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-23 · updated 2026-10-24
Weakness: CWE-923

Description

Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.

Affected products

Ricoh Company Ricoh printers and Multifunction Printers (MFPs): refer to the information provided by the developer.

References

https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000006
https://jvn.jp/en/jp/JVN32082029/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2026-000006

Get alerted when CVE-2026-63226 or the next vulnerability affects your stack