Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

CVE-2026-78249: Fujifilm Apeos printers let attackers read files via web

CVE-2026-78249 · published 1 month ago
Summary

The web management pages on several Fujifilm Apeos multifunction devices can be tricked into accessing files outside their intended folders. This could let an attacker view or download sensitive data stored on the device. Apply the latest firmware updates from Fujifilm or restrict web access to trusted users to mitigate the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
fujifilm business innovation corp. apeos 3060 / 2560 / 1860 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos 3061 / 2561 / 2061 japan model 1.0.3 or earlier
fujifilm business innovation corp. apeos 4570 / 3570 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos 5330 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos 6340 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos 7580 / 6580 / 5580 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos c2360 / c2060 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos c3061 / c2561 / c2061 japan model 1.1.103 or earlier
fujifilm business innovation corp. apeos c3567 / c3067 / c2567 japan model 1.1.3 or earlier
fujifilm business innovation corp. apeos c4030/c3530 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos c5240 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos c7070 / c6570 / c5570 / c4570 / c3570 / c3070 / c2570 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeos c7071 / c6571 / c5571 / c4571 / c3571 / c3071 / c2571 japan model 1.1.3 or earlier
fujifilm business innovation corp. apeos c8180 / c7580 / c6580 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 4560 s / 3960 s / 3360 s japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 4830 / 4830 jm japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 6340 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c3560 s / c3060 s japan model 1.20.105 or earlier
fujifilm business innovation corp. apeosprint c4030 / c3530 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c5240 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c5570 / c4570 japan model 1.50.5 or earlier
fujifilm business innovation corp. apeospro c810 / c750 / c650 japan model 1.50.5 or earlier
fujifilm business innovation corp. revoria press e1136 / e1125/ e1110 / e1100 japan model 1.50.5 or earlier
fujifilm business innovation corp. revoria press e1136p/e1125p/e1110p japan model 1.50.5 or earlier
fujifilm business innovation corp. revoria press ec1100 japan model 1.22.11 or earlier
fujifilm business innovation corp. revoria press ec2100s / ec2100 japan model 1.1.4 or earlier
fujifilm business innovation corp. revoria press sc285s / sc285 japan model 1.1.0 or earlier
fujifilm business innovation corp. revoriapress sc180 / sc170 japan model 1.23.6 or earlier
fujifilm business innovation corp. apeos 3560 / 3060 / 2560 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos 3561 / 3061 / 2561 asia pacific model 1.0.3 or earlier
fujifilm business innovation corp. apeos 5330 / 4830 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos 5570 / 4570 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos 6340 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos 7580 / 6580 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos c3060 / c2560 / c2060 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos c3061 / c2561 / c2061 asia pacific model 1.1.103 or earlier
fujifilm business innovation corp. apeos c3567 / c3067 / c2567 asia pacific model 1.1.3 or earlier
fujifilm business innovation corp. apeos c4030/c3530 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos c5240 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos c7070 / c6570 / c5570 / c4570 / c3570 / c3070 / c2570 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeos c7071 / c6571 / c5571 / c4571 / c3571 / c3071 / c2571 asia pacific model 1.1.3 or earlier
fujifilm business innovation corp. apeos c8180 / c7580 / c6580 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 4560 s / 3960 s / 3360 s asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 5330 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint 6340 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c4030 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c5240 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeosprint c5570 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. apeospro c810 / c750 / c650 asia pacific model 1.50.5 or earlier
fujifilm business innovation corp. revoria press e1136 / e1125/ e1110 / e1100 asia pacific model 1.50.5 or earlier
Showing 50 of 69. Show the rest
VendorProductAffected versions
fujifilm business innovation corp. revoria press ec1100 asia pacific model 1.22.11 or earlier
fujifilm business innovation corp. revoria press ec2100s / ec2100 asia pacific model 1.1.4 or earlier
fujifilm business innovation corp. revoria press sc285s / sc285 asia pacific model 1.1.0 or earlier
fujifilm business innovation corp. revoriapress sc180 / sc170 asia pacific model 1.23.6 or earlier
fujifilm business innovation corp. apeos 3561 / 3061 / 2561 europe model 1.0.3 or earlier
fujifilm business innovation corp. apeos 5330/4830 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeos 5570/4570 europe model 21.50.5 or earlier
fujifilm business innovation corp. apeos c3060 / c2560 / c2060 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeos 3560 / 3060 / 2560 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeos c4030/c3530 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeos c7070 / c6570 / c5570 / c4570 / c3570 / c3070 europe model 21.50.5 or earlier
fujifilm business innovation corp. apeosprint 5330/4830 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeosprint c4030/c3530 europe model 21.50.4 or earlier
fujifilm business innovation corp. apeospro c810 / c750 / c650 europe model 21.50.5 or earlier
fujifilm business innovation corp. revoria press e1136 / e1125 / e1110 /e1100 europe model 21.50.5 or earlier
fujifilm business innovation corp. revoria press ec1100 europe model 21.1.6 or earlier
fujifilm business innovation corp. revoria press ec2100s / ec2100 europe model 21.1.4 or earlier
fujifilm business innovation corp. revoria press sc285s / sc285 europe model 21.1.0 or earlier
fujifilm business innovation corp. revoriapress sc180 / sc170 europe model 21.1.4 or earlier
Original advisory text
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products l...
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.

If the device receives a specially crafted, malicious request, it may trigger unintended processing.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published1 Oct 2026
Updated3 Nov 2026
First seen1 Oct 2026
Sources
CVE-2026-78249 · MITRE
Track software like this
Free during beta