CVE-2026-23767CRITICAL 9.8EPSS p35.5%

CVE-2026-23767CVE-2026-23767

Description

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.45% probability of exploitation · percentile 35.5% · 2026-06-19T12:03:05Z
Published2026-03-05
Last modified2026-03-09

Underlying weaknesses· 1

CWE-306

References

  1. https://download4.epson.biz/sec_pubs/bs/pdf/IP_Filtering_Guide_en_revA.pdf
  2. https://jvn.jp/en/ta/JVNTA97995322/
  3. https://www.epson.jp/support/misc_t/260305_oshirase.htm

1

TypeTargetConfidenceTier
WeaknessMissing Authentication for Critical Functioncwe-3060%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-26506
CVE
CVE-2025-26508
CVE
CVE-2025-26507
CVE
CVE-2022-26795
CVE
CVE-2026-41979
CVE
CVE-2025-27651
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.