CVE-2026-63226
Medium · 5.8CVSS
5.8
EPSS
0.4%
Published
Jul 23, 2026
CISA due date
—
The record
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-10756 TRO600 contains a vulnerability that allows an authenticated attacker to bypass network… CWE-923
- CVE-2026-70212 Improper restriction of communication channel to intended endpoints in Windows Security… CWE-923
- CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
- CVE-2026-62836 Improper restriction of communication channel to intended endpoints in Azure SQL Managed… CWE-923
- CVE-2026-18655 Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the… CWE-923
- CVE-2026-23904 Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP… CWE-923
- CVE-2026-8920 Improper Restriction of Communication Channel to Intended Endpoints and External Control… CWE-923
- CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923