PT-2026-2058 · Ricoh · Ricoh Streamline Nx

CVE-2026-21409 · Publicado 2026-01-09 · Atualizado 2026-01-09

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RICOH Streamline NX versions 3.5.1 through 24R3

Description An improper authorization issue exists in the software. If a man-in-the-middle attack is performed on communication between the product and a user, and a specially crafted request is processed, a user’s registration information and/or OpenID Connect (OIDC) tokens may be obtained. OIDC is an authentication layer built on top of the OAuth 2.0 protocol, allowing users to grant websites or applications limited access to their information without exposing their credentials.

Recommendations Versions 3.5.1 through 24R3 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2026-21409

Produtos afetados

Ricoh Streamline Nx

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-21409 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2009551850232545361 · Publicação no Twitter
• https://t.me/CVEtracker/41804 · Publicação no Telegram
• https://jvn.jp/en/jp/JVN12770174 · Nota
• https://twitter.com/CVEnew/status/2009532269074214962 · Publicação no Twitter
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000011 · Nota