---
id: CVE-2026-78229
title: Image Scanner Driver for Linux contains an OS command injection vulnerability
summary: >-
  Image Scanner Driver for Linux contains an OS command injection vulnerability.
  An attacker who can log in to a Linux system where the affected product is
  installed may execute an arbitrary OS command by making certain preparations.
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: PFU Limited
product: Image Scanner Driver for Linux (fi Series)
affected:
  - image_scanner_driver_for_linux_fi_series 2.0.0
  - image_scanner_driver_for_linux_fi_series >= 2.1.0 <= 2.1.1
  - image_scanner_driver_for_linux_fi_series 2.3.2
  - image_scanner_driver_for_linux_fi_series 2.5.0
  - image_scanner_driver_for_linux_fi_series >= 2.7.0 <= 2.7.1
  - image_scanner_driver_for_linux_fi_series >= 2.8.0 <= 2.8.2
  - image_scanner_driver_for_linux_sp_series 2.0.0
  - image_scanner_driver_for_linux_sp_series >= 2.1.0 <= 2.1.1-4
  - image_scanner_driver_for_linux_sp_series >= 2.2.0 <= 2.2.2
  - image_scanner_driver_for_linux_sp_series 2.3.0
published: '2026-09-30'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T02:16:57.583'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-78229'
references:
  - url: 'https://jvn.jp/en/vu/JVNVU96968110/'
    label: vultures@jpcert.or.jp
  - url: 'https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html'
    label: vultures@jpcert.or.jp
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-30T02:55:35.386Z'
---

## Overview

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.