CVE-2026-78249: A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3,…

Medium severity · published Oct 1, 2026

CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3,…

6.8

CVSS

0.2%

EPSS

On KEV

Description

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 8% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Apeos 3060 / 2560 / 1860 Japan model · Fujifilm Business Innovation Corp.

1.50.5 or earlier · source: vendor

Apeos 3061 / 2561 / 2061 Japan model · Fujifilm Business Innovation Corp.

1.0.3 or earlier · source: vendor