JVNDB-2026-036180

Path traversal vulnerability in FUJIFILM Business Innovation and Sharp MFPs (multifunction printers)

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Sharp Corporation contain a path traversal vulnerability.

• Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) - CVE-2026-78249

FUJIFILM Business Innovation Corp. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. JPCERT/CC coordinated with FUJIFILM Business Innovation Corp. and Sharp Corporation.

(Multiple Venders)

• (Multiple Products)

A wide range of products are affected by this vulnerability.
As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors.

If the affected MFP processes a specially crafted request sent by an attacker who can access its Web management interface, sensitive information stored in the MFP may be obtained.

[Update the firmware]
Apply the appropriate firmware update provided by the respective developers.

[Apply workaround]
Applying appropriate workarounds provided by the respective developers may mitigate the impact of this vulnerability.

For more details, refer to the information provided by the respective developers.

Sharp Corporation

• JVN : Information from Sharp Corporation
• Sharp Corporation : Sharp Corporation website

FUJIFILM Business Innovation Corp. (former Fuji Xerox Co., Ltd.)

• FUJIFILM Business Innovation Corp. : FUJIFILM Business Innovation Corp. website
• JVN : Information from FUJIFILM Business Innovation Corp.

1. Path Traversal(CWE-22) [Other]

1. CVE-2026-78249

1. JVN : JVNVU#90160989

• [2026/10/02]
    Web page was published