CVE-2026-23767
Last modified
CVE-2026-23767 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Epson | Sb-H50 Firmware | All versions |
| Epson | Tm-H6000v Firmware | All versions |
| Epson | Tm-L100 Firmware | All versions |
| Epson | Tm-M10 Firmware | All versions |
| Epson | Tm-M30 Firmware | All versions |
| Epson | Tm-M30ii Firmware | All versions |
| Epson | Tm-M30ii-H Firmware | All versions |
| Epson | Tm-M30ii-S Firmware | All versions |
| Epson | Tm-M30ii-Sl Firmware | All versions |
| Epson | Tm-M30iii Firmware | All versions |
| Epson | Tm-M30iii-H Firmware | All versions |
| Epson | Tm-M55 Firmware | All versions |
| Epson | Tm-P20ii Firmware | All versions |
| Epson | Tm-P80ii Firmware | All versions |
| Epson | Tm-P20 Firmware | All versions |
| Epson | Tm-P60ii Firmware | All versions |
| Epson | Tm-P80 Firmware | All versions |
| Epson | Tm-T20ii Firmware | All versions |
| Epson | Tm-T20iii Firmware | All versions |
| Epson | Tm-T88vi Firmware | All versions |
| Epson | Tm-T88vi-Ihub Firmware | All versions |
| Epson | Tm-T88vii Firmware | All versions |
| Epson | Ub-R04 Firmware | All versions |
| Epson | Ub-E04 Firmware | All versions |
References
- https://jvn.jp/en/ta/JVNTA97995322/Third Party Advisory
- https://www.epson.jp/support/misc_t/260305_oshirase.htmVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-23767?
How severe is CVE-2026-23767?
How do I fix CVE-2026-23767?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-23761VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Po…6.9
- CVE-2026-23762VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Po…6.9
- CVE-2026-23763VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2…8.5
- CVE-2026-23764VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Po…6.8
- CVE-2026-23765Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-23766Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2026-23768lucy-xss-filter before commit 7c1de6d allows an attacker to …6.1
- CVE-2026-23769lucy-xss-filter before commit e5826c0 allows an attacker to …6.1
- CVE-2026-2377A flaw was found in Red Hat Quay and mirror registry for Red…6.5
- CVE-2026-23772Dell Storage Manager - Replay Manager for Microsoft Servers,…7.3
- CVE-2026-23773Dell Disk Library for Mainframe, version(s) DLm 8700/2700 co…4.3
- CVE-2026-23774Dell PowerProtect Data Domain with Data Domain Operating Sys…7.2
Are you affected by CVE-2026-23767?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST