CVE-2026-101040

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-404

• https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py
• https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop
• https://vuldb.com/cve/CVE-2026-101040
• https://vuldb.com/submit/927274
• https://vuldb.com/submit/927275
• https://vuldb.com/submit/927289
• https://vuldb.com/submit/927478
• https://vuldb.com/vuln/410908
• https://vuldb.com/vuln/410908/cti

Published

Sep 28, 2026

Last Modified

Sep 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-101035A flaw has been found in aligungr UERANSIM up to 3.3.0. This…5.3
• CVE-2026-101036A vulnerability has been found in FLB-Music FLB-Music-Player…5.3
• CVE-2026-101037A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.…9.9
• CVE-2026-101038A vulnerability was determined in FAST FAC1200R 5.0_20201119…9.9
• CVE-2026-101039A vulnerability was identified in FAST FAC1900R 20190827_2.0…10
• CVE-2026-10104The Product Video Gallery for Woocommerce plugin for WordPre…4.4
• CVE-2026-101041The account recovery (password reset) functionality in the v…6.3
• CVE-2026-101042Parse Server is an open-source backend server. In versions >…6.4
• CVE-2026-101043pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.…7.4
• CVE-2026-101044pacquet, the Rust package-manager component shipped in the p…7.1
• CVE-2026-101045Fleet-maintained app install and uninstall scripts for macOS…8
• CVE-2026-101046Fleet before 4.89.0 contains an SQL injection vulnerability …3.1