Veille CVE

‹ Retour à la liste

CVE-2026-11744

3.8 Faible

Publiée le 24/09/2026 à 09:16 · Modifiée le 24/09/2026 à 23:08 · En attente d'analyse NVD · Source : eb41dac7-0af8-4f84-9f6d-0272772514f4

Description

An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to the device and a specially crafted NFC card or emulator could exploit this flaw to execute arbitrary code within the context of the application's user interface. This could result in unauthorized actions or information disclosure.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 3.8 Faible eb41dac7-0af8-4f84-9f6d-0272772514f4 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Faiblesses (CWE)

Références

Ailleurs