Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.

Multiple printers and scanners provided by SEIKO EPSON CORPORATION contain the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/296.html' target='_blank'></a><ul><li>Remaining revoked root certificates (CWE-296) - CVE-2026-73542</li></ul>Agni Athreya, CyberArch Student Researcher of Carl Vinson Institute of Government at University of Georgia reported this vulnerability to SEIKO EPSON CORPORATION and coordinated. After the coordination was completed, SEIKO EPSON CORPORATION reported the case to JPCERT/CC to notify users of the solution through JVN.