CVE-2026-63226

Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.

CVSS 4.0

6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

CVSS 3.0

5.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-25)

CWE

CWE-923

Published

2026-07-23

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

References

• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000006
• https://jvn.jp/en/jp/JVN32082029/
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2026-000006

Check your stackJSON