CVE-2025-63579: Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed wit

highCVSS 7.5CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be obtained. This affects Kyocera Command Center RX TASKalfa 2552ci, TASKalfa 3252ci, TASKalfa 2553ci, TASKalfa 3253ci, TASKalfa 3554ci, TASKalfa 4052ci, TASKalfa 5052ci, TASKalfa 6052ci, TASKalfa 7052ci, TASKalfa 8052ci, TASKalfa 7353ci, TASKalfa 8353ci, TASKalfa 2554ci, TASKalfa 3254ci, TASKalfa 505.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: high — CVSS 7.5
Published: 2026-07-09
Last updated: 2026-07-10
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-63579

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-635790.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2025-63579	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEW] [UNPATCHED] [medium] Kyocera Printer: Vulnerability allows information disclosurecert-bund

Recent advisories for Unauthorized use of

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-3144: IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacke…nvd · 2026-07-08
highCVE-2026-58299: Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unau…nvd · 2026-07-03
highCVE-2026-58295: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-base…nvd · 2026-07-03
highCVE-2026-58294: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute c…nvd · 2026-07-03
highCVE-2026-58290: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-base…nvd · 2026-07-03
criticalCVE-2026-58289: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-base…nvd · 2026-07-03