{"id":"CVE-2026-78229","title":"Image Scanner Driver for Linux contains an OS command injection vulnerability","summary":"Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.","severity":"medium","cvss":6.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"PFU Limited","product":"Image Scanner Driver for Linux (fi Series)","affected":["image_scanner_driver_for_linux_fi_series 2.0.0","image_scanner_driver_for_linux_fi_series >= 2.1.0 <= 2.1.1","image_scanner_driver_for_linux_fi_series 2.3.2","image_scanner_driver_for_linux_fi_series 2.5.0","image_scanner_driver_for_linux_fi_series >= 2.7.0 <= 2.7.1","image_scanner_driver_for_linux_fi_series >= 2.8.0 <= 2.8.2","image_scanner_driver_for_linux_sp_series 2.0.0","image_scanner_driver_for_linux_sp_series >= 2.1.0 <= 2.1.1-4","image_scanner_driver_for_linux_sp_series >= 2.2.0 <= 2.2.2","image_scanner_driver_for_linux_sp_series 2.3.0"],"published":"2026-09-30","updated":"2026-09-30","sourceUpdated":"2026-09-30T02:16:57.583","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78229","references":[{"url":"https://jvn.jp/en/vu/JVNVU96968110/","label":"vultures@jpcert.or.jp"},{"url":"https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html","label":"vultures@jpcert.or.jp"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-30T02:55:35.386Z","slug":"CVE-2026-78229","body":"## Overview\n\nImage Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":36.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}