CVE-2026-101040 is a remotely exploitable denial of service vulnerability affecting Ricoh SP 330DN, SP 221, SP C252SF, and Aficio SP 3500SF devices up to version 20260813. The vulnerability resides in the HTTP Multipart Form-Data Parser component. An attacker can manipulate this component to cause a denial of service condition. The vendor was notified but did not respond, and no official patch or remediation guidance is currently available. Public exploit code has been released, increasing the risk of exploitation.

Successful exploitation results in denial of service, causing affected Ricoh devices to become unavailable or unresponsive. This can disrupt printing and related services relying on these devices. The attack can be performed remotely without user interaction, increasing the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, organizations should consider network-level mitigations such as restricting access to affected devices and monitoring for exploit attempts. Avoid exposing these devices directly to untrusted networks until a patch is released.