CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

  • Published Oct 1, 2026
  • CVSS 6.8 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-78249 at the National Vulnerability Database