CVE-2026-63226 Ricoh Company CVE debrief

Who should care

Organizations using affected Ricoh Printers and Multifunction Printers (MFPs) with SSH enabled should assess and mitigate this vulnerability. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Operators, platform administrators, vulnerability management teams, and security teams should be aware of the potential impact and take necessary actions.

Technical summary

Ricoh Printers and Multifunction Printers (MFPs) do not restrict SSH port forwarding, potentially allowing connections to arbitrary LAN nodes when SSH is enabled. This vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. Affected product context indicates that SSH port forwarding may be leveraged to connect to other nodes on the LAN. Defensive impact suggests that organizations should assess and mitigate this vulnerability to prevent potential lateral movement within the LAN.

Defensive priority

Medium priority due to potential for lateral movement within the LAN.

Recommended defensive actions

• Inventory and assess affected Ricoh Printers and Multifunction Printers (MFPs)
• Disable SSH if not required
• Implement network monitoring for suspicious SSH activity
• Apply vendor patches or workarounds when available
• Consider compensating controls like network segmentation
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Evidence is limited; official CVE and NVD records confirm the vulnerability. Further details from vendor sources are needed for comprehensive assessment. The vulnerability allows for potential lateral movement within the LAN. Affected product deployments need to be identified and assessed for exposure. Official advisories and CVE records should be reviewed for affected scope, severity, and vendor guidance.

Official resources