CVE-2026-23767

critical · 9.8

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

9.8

CVSS

0.4%

EPSS (exploit prob.)

38th

EPSS percentile

2026-03-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
epson	sb-h50_firmware	all versions
epson	sb-h50	all versions
epson	tm-h6000v_firmware	all versions
epson	tm-h6000v	all versions
epson	tm-l100_firmware	all versions
epson	tm-l100	all versions
epson	tm-m10_firmware	all versions
epson	tm-m10	all versions
epson	tm-m30_firmware	all versions
epson	tm-m30	all versions
epson	tm-m30ii_firmware	all versions
epson	tm-m30ii	all versions
epson	tm-m30ii-h_firmware	all versions
epson	tm-m30ii-h	all versions
epson	tm-m30ii-s_firmware	all versions
epson	tm-m30ii-s	all versions
epson	tm-m30ii-sl_firmware	all versions
epson	tm-m30ii-sl	all versions
epson	tm-m30iii_firmware	all versions
epson	tm-m30iii	all versions
epson	tm-m30iii-h_firmware	all versions
epson	tm-m30iii-h	all versions
epson	tm-m55_firmware	all versions
epson	tm-m55	all versions
epson	tm-p20ii_firmware	all versions
epson	tm-p20ii	all versions
epson	tm-p80ii_firmware	all versions
epson	tm-p80ii	all versions
epson	tm-p20_firmware	all versions
epson	tm-p20	all versions
epson	tm-p60ii_firmware	all versions
epson	tm-p60ii	all versions
epson	tm-p80_firmware	all versions
epson	tm-p80	all versions
epson	tm-t20ii_firmware	all versions
epson	tm-t20ii	all versions
epson	tm-t20iii_firmware	all versions
epson	tm-t20iii	all versions
epson	tm-t88vi_firmware	all versions
epson	tm-t88vi	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-23767