A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.
If the device receives a specially crafted, malicious request, it may trigger unintended processing.
CVE-2026-21408 is a high-severity vulnerability in FUJIFILM Business Innovation Corp. 's beat-access for Windows (version 3.0.3 and earlier) involving an uncontrolled search path element. This flaw allows an attacker with limited privileges to execute arbitrary code with SYSTEM-level privileges by exploiting insecure DLL loading behavior. The vulnerability requires local access and some user interaction, but once exploited, it can compromise confidentiality, integrity, and availability of affected systems. No known exploits are currently in the wild. European organizations using this software, especially in sectors relying on FUJIFILM's document management solutions, are at risk. Mitigation involves applying patches when available, restricting DLL search paths, and implementing application whitelisting. Countries with significant adoption of FUJIFILM products and critical infrastructure relying on them, such as Germany, France, and the UK, are most likely to be impacted.
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition.
