Security Update for Production Printers and Office Multifunction Printers

We have identified an issue that affects specific production printers and office/small office multifunction printers. Under specific conditions, a user with administrator credentials can log into the product's Remote UI and request access to configuration information through specially crafted requests.

This issue does not affect general users and cannot be exploited without access to administrator credentials. Risk of unauthorised access remains extremely low if the administrator password has been changed from its default value and is managed appropriately.

CVE-2026-1789

Due to a vulnerability in the browser-based remote management interface, a third party with administrator credentials can access sensitive information on the device by sending specially crafted requests.

Mitigation

While no cases of misuse have been reported, we recommend the following general security practices below. These are applicable to all network-connected devices:

• Avoid connecting the product directly to the Internet but instead, connect to a secure private network constructed with a firewall appliance, wired router, or Wi-Fi router
• Change the product's default password
• Configure separate administrator and general user IDs/passwords, if supported
• Use difficult to guess passwords or authentication values
• Enable the product's available authentication features and manage user access appropriately
• Enable multi-factor authentication, if supported
• Ensure adequate physical security for the device and its installation environment

Visit here to find out more.

Affected products

The following devices need to be updated. Please refer below for the affected models, and information regarding additional models will be updated promptly: