Read the docs
TI-2026-54422 Aliases CVE-2026-78249GHSA-vmmg-gmvf-x548

Path traversal in FUJIFILM Business Innovation Apeos 3060 / 2560 / 1860 Japan model

Priority LOW 29CWE-22Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FUJIFILM Business InnovationApeos 3060 / 2560 / 1860 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 3061 / 2561 / 2061 Japan modelup to 1.0.3—No fix listedCNA
FUJIFILM Business InnovationApeos 4570 / 3570 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 5330 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 6340 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 7580 / 6580 / 5580 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C2360 / C2060 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C3061 / C2561 / C2061 Japan modelup to 1.1.103—No fix listedCNA
FUJIFILM Business InnovationApeos C3567 / C3067 / C2567 Japan modelup to 1.1.3—No fix listedCNA
FUJIFILM Business InnovationApeos C4030/C3530 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C5240 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan modelup to 1.1.3—No fix listedCNA
FUJIFILM Business InnovationApeos C8180 / C7580 / C6580 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 4560 S / 3960 S / 3360 S Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 4830 / 4830 JM Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 6340 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C3560 S / C3060 S Japan modelup to 1.20.105—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C4030 / C3530 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C5240 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C5570 / C4570 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPro C810 / C750 / C650 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press E1136 / E1125/ E1110 / E1100 Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press E1136P/E1125P/E1110P Japan modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC1100 Japan modelup to 1.22.11—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC2100S / EC2100 Japan modelup to 1.1.4—No fix listedCNA
FUJIFILM Business InnovationRevoria Press SC285S / SC285 Japan modelup to 1.1.0—No fix listedCNA
FUJIFILM Business InnovationRevoriaPress SC180 / SC170 Japan modelup to 1.23.6—No fix listedCNA
FUJIFILM Business InnovationApeos 3560 / 3060 / 2560 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 3561 / 3061 / 2561 Asia Pacific modelup to 1.0.3—No fix listedCNA
FUJIFILM Business InnovationApeos 5330 / 4830 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 5570 / 4570 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 6340 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos 7580 / 6580 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C3060 / C2560 / C2060 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C3061 / C2561 / C2061 Asia Pacific modelup to 1.1.103—No fix listedCNA
FUJIFILM Business InnovationApeos C3567 / C3067 / C2567 Asia Pacific modelup to 1.1.3—No fix listedCNA
FUJIFILM Business InnovationApeos C4030/C3530 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C5240 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific modelup to 1.1.3—No fix listedCNA
FUJIFILM Business InnovationApeos C8180 / C7580 / C6580 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 5330 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 6340 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C4030 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C5240 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C5570 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPro C810 / C750 / C650 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific modelup to 1.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC1100 Asia Pacific modelup to 1.22.11—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC2100S / EC2100 Asia Pacific modelup to 1.1.4—No fix listedCNA
FUJIFILM Business InnovationRevoria Press SC285S / SC285 Asia Pacific modelup to 1.1.0—No fix listedCNA
FUJIFILM Business InnovationRevoriaPress SC180 / SC170 Asia Pacific modelup to 1.23.6—No fix listedCNA
FUJIFILM Business InnovationApeos 3561 / 3061 / 2561 Europe modelup to 1.0.3—No fix listedCNA
FUJIFILM Business InnovationApeos 5330/4830 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeos 5570/4570 Europe modelup to 21.50.5—No fix listedCNA
FUJIFILM Business InnovationApeos C3060 / C2560 / C2060 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeos 3560 / 3060 / 2560 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeos C4030/C3530 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 Europe modelup to 21.50.5—No fix listedCNA
FUJIFILM Business InnovationApeosPrint 5330/4830 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeosPrint C4030/C3530 Europe modelup to 21.50.4—No fix listedCNA
FUJIFILM Business InnovationApeosPro C810 / C750 / C650 Europe modelup to 21.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press E1136 / E1125 / E1110 /E1100 Europe modelup to 21.50.5—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC1100 Europe modelup to 21.1.6—No fix listedCNA
FUJIFILM Business InnovationRevoria Press EC2100S / EC2100 Europe modelup to 21.1.4—No fix listedCNA
FUJIFILM Business InnovationRevoria Press SC285S / SC285 Europe modelup to 21.1.0—No fix listedCNA
FUJIFILM Business InnovationRevoriaPress SC180 / SC170 Europe modelup to 21.1.4—No fix listedCNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-78249
  2. 2026-10-03 Alias added: GHSA-vmmg-gmvf-x548

References

  • TI-2024-34873 Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple… CVSS 3.1HIGH 7.5
  • TI-2024-34872 Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple… CVSS 3.1HIGH 7.5
  • TI-2024-34869 Stack-based buffer overflow in Brother Industries, Ltd HL-L8260CDN CVSS 3.1HIGH 7.2
  • TI-2024-34874 Insufficiently protected credentials in Brother Industries, Ltd HL-L8260CDN CVSS 3.1MEDIUM 6.8
  • TI-2024-34871 Server-side request forgery in Brother Industries, Ltd HL-L8260CDN CVSS 3.1MEDIUM 5.3
  • TI-2024-34870 Server-side request forgery in Brother Industries, Ltd HL-L8260CDN CVSS 3.1MEDIUM 5.3
See all 13 →

Sources