Skip to content
Fencer Vulns
medium 6.8

CVE-2026-78249 json

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571…

published 2026-10-01 39 d ago modified 2026-10-01 38 d ago also EUVD-2026-90549

cvss
6.8
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.

If the device receives a specially crafted, malicious request, it may trigger unintended processing.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
38 d ago

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 6.8 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 4.0 6.8 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Fujifilm Business Innovation Corp. Apeos 3060 / 2560 / 1860 Japan model
  • Fujifilm Business Innovation Corp. Apeos 3061 / 2561 / 2061 Japan model
  • Fujifilm Business Innovation Corp. Apeos 4570 / 3570 Japan model
  • Fujifilm Business Innovation Corp. Apeos 5330 Japan model
  • Fujifilm Business Innovation Corp. Apeos 6340 Japan model
  • Fujifilm Business Innovation Corp. Apeos 7580 / 6580 / 5580 Japan model
  • Fujifilm Business Innovation Corp. Apeos C2360 / C2060 Japan model
  • Fujifilm Business Innovation Corp. Apeos C3061 / C2561 / C2061 Japan model
  • Fujifilm Business Innovation Corp. Apeos C3567 / C3067 / C2567 Japan model
  • Fujifilm Business Innovation Corp. Apeos C4030/C3530 Japan model
  • Fujifilm Business Innovation Corp. Apeos C5240 Japan model
  • Fujifilm Business Innovation Corp. Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model
  • Fujifilm Business Innovation Corp. Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model
  • Fujifilm Business Innovation Corp. Apeos C8180 / C7580 / C6580 Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint 4560 S / 3960 S / 3360 S Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint 4830 / 4830 JM Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint 6340 Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint C3560 S / C3060 S Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint C4030 / C3530 Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint C5240 Japan model
  • Fujifilm Business Innovation Corp. ApeosPrint C5570 / C4570 Japan model
  • Fujifilm Business Innovation Corp. ApeosPro C810 / C750 / C650 Japan model
  • Fujifilm Business Innovation Corp. Revoria Press E1136 / E1125/ E1110 / E1100 Japan model
  • Fujifilm Business Innovation Corp. Revoria Press E1136P/E1125P/E1110P Japan model
  • Fujifilm Business Innovation Corp. Revoria Press EC1100 Japan model
  • Fujifilm Business Innovation Corp. Revoria Press EC2100S / EC2100 Japan model
  • Fujifilm Business Innovation Corp. Revoria Press SC285S / SC285 Japan model
  • Fujifilm Business Innovation Corp. RevoriaPress SC180 / SC170 Japan model
  • Fujifilm Business Innovation Corp. Apeos 3560 / 3060 / 2560 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos 3561 / 3061 / 2561 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos 5330 / 4830 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos 5570 / 4570 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos 6340 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos 7580 / 6580 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C3060 / C2560 / C2060 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C3061 / C2561 / C2061 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C3567 / C3067 / C2567 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C4030/C3530 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C5240 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific model
  • Fujifilm Business Innovation Corp. Apeos C8180 / C7580 / C6580 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint 5330 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint 6340 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint C4030 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint C5240 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPrint C5570 Asia Pacific model
  • Fujifilm Business Innovation Corp. ApeosPro C810 / C750 / C650 Asia Pacific model
  • Fujifilm Business Innovation Corp. Revoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific model

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.