Ricoh printers and Multifunction Printers (MFPs) missing restriction on SSH port forwarding
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations.
CSIRTS triage
- What
- Ricoh printers and MFPs do not implement restrictions on SSH port forwarding.
- Who is affected
- Deployments of Ricoh printers and MFPs.
- Urgency
- Remediation urgency is unknown due to unspecified severity.
- Action
- Implement restrictions on SSH port forwarding.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Printers and Multifunction Printers (MFPs)
Get an email when a new Printers and Multifunction Printers (MFPs) advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://jvn.jp/en/jp/JVN32082029/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-632260.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-63226 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Ricoh printers and
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-63226: Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement re…nvd · 2026-07-23
- unknownReflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Ima…jvn · 2026-07-09
- mediumCVE-2026-56809: Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Moni…nvd · 2026-06-30
- unknownPrivilege escalation vulnerability in multiple RICOH and KONICA MINOLTA JAPAN printer driversjvn · 2026-06-15
More from JVN (Japan Vulnerability Notes)
- unknownPermissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-2026-07-31
- unknownSharp Network Scanner Tool insecure initial configuration2026-07-31
- unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPs2026-07-31
- unknownMultiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App2026-07-31
- unknownCSV file injection vulnerability in BaserCMS2026-07-31