PT-2026-2058 · Ricoh · Ricoh Streamline Nx

Published 2026-01-09 · Updated 2026-01-09 · CVE-2026-21409

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RICOH Streamline NX versions 3.5.1 through 24R3

Description An improper authorization issue exists in the software. If a man-in-the-middle attack is performed on communication between the product and a user, and a specially crafted request is processed, a user’s registration information and/or OpenID Connect (OIDC) tokens may be obtained. OIDC is an authentication layer built on top of the OAuth 2.0 protocol, allowing users to grant websites or applications limited access to their information without exposing their credentials.

Recommendations Versions 3.5.1 through 24R3 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-21409

Affected Products

Ricoh Streamline Nx

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-21409 · Security Note
• https://twitter.com/VulmonFeeds/status/2009551850232545361 · Twitter Post
• https://t.me/CVEtracker/41804 · Telegram Post
• https://jvn.jp/en/jp/JVN12770174 · Note
• https://twitter.com/CVEnew/status/2009532269074214962 · Twitter Post
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000011 · Note