CVE-2026-26050
Last modified
CVE-2026-26050 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-26050?
How severe is CVE-2026-26050?
How do I fix CVE-2026-26050?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-26045A flaw was identified in Moodle’s backup restore functionali…7.2
- CVE-2026-26046A vulnerability was found in a Moodle TeX filter administrat…7.2
- CVE-2026-26047A denial-of-service vulnerability was identified in Moodle’s…6.5
- CVE-2026-26048The Wi-Fi router is vulnerable to de-authentication attacks …7.5
- CVE-2026-26049The web management interface of the device renders the passw…5.7
- CVE-2026-2605Tanium addressed an insertion of sensitive information into …5.3
- CVE-2026-26051WebSocket endpoints lack proper authentication mechanisms, e…9.8
- CVE-2026-26053An Incorrect Privilege Assignment (CWE-266) vulnerability in…5.3
- CVE-2026-26054SumatraPDF is a multi-format reader for Windows. Prior to 3.…6.8
- CVE-2026-26055Yoke is a Helm-inspired infrastructure-as-code (IaC) package…7.5
- CVE-2026-26056Yoke is a Helm-inspired infrastructure-as-code (IaC) package…8.8
- CVE-2026-26057Skill Scanner is a security scanner for AI Agent Skills that…9.1
Are you affected by CVE-2026-26050?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST