# cve.now: Ricoh Company, Ltd.

The newest entries naming Ricoh Company, Ltd. as an affected vendor (up to 200), of 41 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-101040](https://cve.now/CVE-2026-101040.md): Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service (CVSS 7.1)
- [CVE-2026-63226](https://cve.now/CVE-2026-63226.md): Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. (CVSS 5.8)
- [CVE-2026-56809](https://cve.now/CVE-2026-56809.md): Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting v (CVSS 6.1)
- [CVE-2026-50100](https://cve.now/CVE-2026-50100.md): Multiple printer drivers provided by Ricoh Company, Ltd. (CVSS 7.8)
- [CVE-2026-41226](https://cve.now/CVE-2026-41226.md): Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. (CVSS 4.7)
- [CVE-2026-26050](https://cve.now/CVE-2026-26050.md): The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to (CVSS 7.8)
- [CVE-2019-25324](https://cve.now/CVE-2019-25324.md): RICOH Web Image Monitor 1.09 - HTML Injection (CVSS 5.1)
- [CVE-2026-24466](https://cve.now/CVE-2026-24466.md): Products provided by Oki Electric Industry Co., Ltd. (CVSS 6.7)
- [CVE-2025-53869](https://cve.now/CVE-2025-53869.md): Multiple MFPs provided by Brother Industries, Ltd. (CVSS 3.7)
- [CVE-2026-21409](https://cve.now/CVE-2026-21409.md): Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. (CVSS 5.9)
- [CVE-2025-58422](https://cve.now/CVE-2025-58422.md): RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. (CVSS 3.1)
- [CVE-2025-41439](https://cve.now/CVE-2025-41439.md): A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. (CVSS 6.1)
- [CVE-2025-49797](https://cve.now/CVE-2025-49797.md): Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. (CVSS 7.8)
- [CVE-2024-51984](https://cve.now/CVE-2024-51984.md): Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 6.8)
- [CVE-2024-51983](https://cve.now/CVE-2024-51983.md): Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 7.5)
- [CVE-2024-51982](https://cve.now/CVE-2024-51982.md): Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh. (CVSS 7.5)
- [CVE-2024-51981](https://cve.now/CVE-2024-51981.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2024-51980](https://cve.now/CVE-2024-51980.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2024-51979](https://cve.now/CVE-2024-51979.md): Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc. (CVSS 7.2)
- [CVE-2024-51977](https://cve.now/CVE-2024-51977.md): Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2025-48825](https://cve.now/CVE-2025-48825.md): RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who (CVSS 2.5)
- [CVE-2025-46783](https://cve.now/CVE-2025-46783.md): Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. (CVSS 9.8)
- [CVE-2025-36506](https://cve.now/CVE-2025-36506.md): External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. (CVSS 6.5)
- [CVE-2025-41393](https://cve.now/CVE-2025-41393.md): Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image (CVSS 6.1)
- [CVE-2024-47939](https://cve.now/CVE-2024-47939.md): Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. (CVSS 7.7)
- [CVE-2024-41995](https://cve.now/CVE-2024-41995.md): Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. (CVSS 7.5)
- [CVE-2024-39927](https://cve.now/CVE-2024-39927.md): Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. (CVSS 8.2)
- [CVE-2024-37387](https://cve.now/CVE-2024-37387.md): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. (CVSS 4.0)
- [CVE-2024-37124](https://cve.now/CVE-2024-37124.md): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. (CVSS 9.8)
- [CVE-2024-36252](https://cve.now/CVE-2024-36252.md): Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. (CVSS 6.3)
- [CVE-2024-22475](https://cve.now/CVE-2024-22475.md): Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRI (CVSS 6.1)
- [CVE-2024-21824](https://cve.now/CVE-2024-21824.md): Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER I (CVSS 5.3)
- [CVE-2023-30759](https://cve.now/CVE-2023-30759.md): The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an u (CVSS 8.4)
- [CVE-2022-37406](https://cve.now/CVE-2022-37406.md): Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker wit (no CVSS)
- [CVE-2022-36403](https://cve.now/CVE-2022-36403.md): Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges (no CVSS)
- [CVE-2019-6021](https://cve.now/CVE-2019-6021.md): Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbit (no CVSS)
- [CVE-2018-16188](https://cve.now/CVE-2018-16188.md): SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display vers (no CVSS)
- [CVE-2018-16187](https://cve.now/CVE-2018-16187.md): The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whi (no CVSS)
- [CVE-2018-16186](https://cve.now/CVE-2018-16186.md): RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whitebo (no CVSS)
- [CVE-2018-16185](https://cve.now/CVE-2018-16185.md): RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whitebo (no CVSS)
- [CVE-2018-16184](https://cve.now/CVE-2018-16184.md): RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whi (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ricoh
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.