Vulnerability · Published Jan 29, 2026 · Assigned by jpcert
CVE-2025-53869
Low 3.7
In plain English
A low-severity improper certificate validation in Multiple MFPs from Brother Industries, Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.2%top 95.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Brother Industries, Ltd. | Multiple MFPs | see the information provided by the vendor |
| Konica Minolta, Inc. | Multiple MFPs | see the information provided by the vendor |
| Ricoh Company, Ltd. | Multiple MFPs | see the information provided by the vendor |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N