Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
CVE-2026-63226: Ricoh Printers Allow Unauthorized Remote Access
CVE-2026-63226 · published 3 months ago
Summary
Ricoh printers and multifunction devices can be accessed remotely without permission if SSH is enabled. This could allow hackers to connect to other devices on the network. Users should disable SSH on these devices unless it's absolutely necessary.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ricoh company | ricoh printers and multifunction printers (mfps) | refer to the information provided by the developer. |
Original advisory text
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled o...
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
6.9
Medium
Type
CWE-923Improper Restriction of Communication Channel to Intended Endpoints
Timeline
Published23 Jul 2026
Updated4 Nov 2026
First seen23 Jul 2026
Track software like this
Free during beta