Vulnerability · Published Jul 23, 2026 · Assigned by jpcert
CVE-2026-63226
Medium 5.8
In plain English
A medium-severity security flaw in Ricoh printers and Multifunction Printers (MFPs) from Ricoh Company. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.0)5.8Medium
Exploit odds (30 days)0.4%top 67.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ricoh Company | Ricoh printers and Multifunction Printers (MFPs) | refer to the information provided by the developer. |
Weakness: CWE-923 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N