CVE-2026-78249
MEDIUMCVSS 6.8/10
Last modified
CVE-2026-78249 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing..
Description
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Fujifilm Business Innovation Corp. | Apeos 3060 / 2560 / 1860 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 3061 / 2561 / 2061 Japan model | 1.0.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 4570 / 3570 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 5330 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 6340 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 7580 / 6580 / 5580 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C2360 / C2060 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C3061 / C2561 / C2061 Japan model | 1.1.103 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C3567 / C3067 / C2567 Japan model | 1.1.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C4030/C3530 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C5240 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model | 1.1.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C8180 / C7580 / C6580 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 4560 S / 3960 S / 3360 S Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 4830 / 4830 JM Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 6340 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C3560 S / C3060 S Japan model | 1.20.105 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C4030 / C3530 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C5240 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C5570 / C4570 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPro C810 / C750 / C650 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press E1136 / E1125/ E1110 / E1100 Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press E1136P/E1125P/E1110P Japan model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press EC1100 Japan model | 1.22.11 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press EC2100S / EC2100 Japan model | 1.1.4 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press SC285S / SC285 Japan model | 1.1.0 or earlier |
| Fujifilm Business Innovation Corp. | RevoriaPress SC180 / SC170 Japan model | 1.23.6 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 3560 / 3060 / 2560 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 3561 / 3061 / 2561 Asia Pacific model | 1.0.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 5330 / 4830 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 5570 / 4570 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 6340 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos 7580 / 6580 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C3060 / C2560 / C2060 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C3061 / C2561 / C2061 Asia Pacific model | 1.1.103 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C3567 / C3067 / C2567 Asia Pacific model | 1.1.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C4030/C3530 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C5240 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific model | 1.1.3 or earlier |
| Fujifilm Business Innovation Corp. | Apeos C8180 / C7580 / C6580 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 5330 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint 6340 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C4030 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C5240 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPrint C5570 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | ApeosPro C810 / C750 / C650 Asia Pacific model | 1.50.5 or earlier |
| Fujifilm Business Innovation Corp. | Revoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific model | 1.50.5 or earlier |
Showing 50 of 69 affected configurations. See the CNA advisory for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-78249?
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.
If the device receives a specially crafted, malicious request, it may trigger unintended processing.
How severe is CVE-2026-78249?
CVE-2026-78249 has a CVSS score of 6.8/10 (MEDIUM severity).
How do I fix CVE-2026-78249?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-78243Apache YuniKorn 1.8.0 and later, if configured with the LDAP…2.1
- CVE-2026-78244A vulnerability was detected in itsourcecode Real Estate Man…7.3
- CVE-2026-78245A flaw has been found in itsourcecode Online Pharmacy System…7.3
- CVE-2026-78246A vulnerability has been found in itsourcecode Online Clinic…7.3
- CVE-2026-78247A vulnerability was found in SourceCodester Simple Online Fo…7.3
- CVE-2026-78248A vulnerability was determined in SourceCodester Simple Onli…7.3
- CVE-2026-78250A vulnerability was identified in bytebot-ai bytebot 0.0.1. …4.3
- CVE-2026-78251DJI drones contain an FTP service that uses hardcoded creden…9.3
- CVE-2026-78252GitLab has remediated an issue in GitLab CE/EE affecting all…6.1
- CVE-2026-78253Uncontrolled recursion in QXmlStreamReader::readElementText(…2.3
- CVE-2026-78254The ftp and scp tasks of Apache Ant can download files from …7.4
- CVE-2026-78255The HTTP media server running on DJI drones serves stored ph…8.7
Are you affected by CVE-2026-78249?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST