CVE-2026-78249: Path Traversal

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs high privileges and adjacent-network access to the device. No user interaction is required, and exploitation is rated low complexity with no additional attack requirements.

Q: What security impact is indicated by the CVSS assessment?

The assessment indicates a high impact on confidentiality. It does not indicate an impact on integrity or availability.

Published Oct 1, 2026

Updated

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.

If the device receives a specially crafted, malicious request, it may trigger unintended processing.

Affected Software

2 affected components

Fujifilm Business Innovation Apeos C4571<=1.1.3

Fujifilm Business Innovation Apeos C3567<=1.1.3

Event History

Oct 1, 2026

CVE Published

via MITRE·07:56 AM

Data Sourced

via MITRE·07:56 AM

DescriptionWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs high privileges and adjacent-network access to the device. No user interaction is required, and exploitation is rated low complexity with no additional attack requirements.

What security impact is indicated by the CVSS assessment?