CVE-2026-56809

mediumCVSS 6.1covered by 2 sourcesfirst seen 2026-06-30

Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability.

CSIRTS triage

Cross-site scripting

What: The devices contain a reflected cross-site scripting vulnerability.
Who is affected: Users of affected laser printers and multifunction printers implementing Ricoh Web Image Monitor.
Urgency: Remediation is urgent due to the potential for exploitation via web interfaces.
Action: Apply vendor-provided patches or mitigations.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-56809

Get an email if CVE-2026-56809 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.

Advisory coverage (2)

unknownReflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Ima…jvn · 2026-07-09
mediumCVE-2026-56809: Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Moni…nvd · 2026-06-30

External references

NVD record for CVE-2026-56809

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-56809 status](https://www.csirts.com/badge/CVE-2026-56809)](https://www.csirts.com/cve/CVE-2026-56809)