https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:34:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274751 EUVD-2026-274751 https://cve.radiocsirt.org/vuln/euvd-2026-274751 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23767 <p>ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.</p> <p>ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23767 https://cve.radiocsirt.org/vuln/ghsa-57q8-p4r4-7xr7 <p>ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.</p> <p>ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.</p> https://cve.radiocsirt.org/vuln/ghsa-57q8-p4r4-7xr7 https://cve.radiocsirt.org/vuln/jvndb-2026-006102 <p>ESC/POS is a printer control language designed by Seiko Epson Corporation for controlling POS printers and related devices. The following security issues have been identified with ESC/POS. Products implementing ESC/POS need to be designed and operated with consideration of the following security issues: Missing authentication for critical function (CWE-306) ESC/POS does not define any mechanisms for user authentication or command authorization. Consequently, printers accepting ESC/POS commands over a network have no restrictions on connections, allowing commands to be sent from any host on the network. Improper access control (CWE-284) ESC/POS does not define any mechanisms to restrict origins or destinations of communication. Many printers listen for ESC/POS communication on TCP port 9100 by default, potentially allowing access from any host on the network. Cleartext transmission of sensitive information (CWE-319) ESC/POS command transmission does not provide encryption or integrity protection mechanisms, and communicate is performed in plaintext. Consequently, attackers on the same network could be able to intercept or tamper with transmitted data. JPCERT/CC has assigned CVE-2026-23767 to the vulnerability originating from the ESC/POS specification. This document was written by Seiko Epson Corporation and JPCERT/CC. The issue regarding the lack of an authentication mechanism was reported to Seiko Epson Corporation by Michael Cook (FutileSkills), and coord…</p> <p>ESC/POS is a printer control language designed by Seiko Epson Corporation for controlling POS printers and related devices. The following security issues have been identified with ESC/POS. Products implementing ESC/POS need to be designed and operated with consideration of the following security issues: Missing authentication for critical function (CWE-306) ESC/POS does not define any mechanisms for user authentication or command authorization. Consequently, printers accepting ESC/POS commands over a network have no restrictions on connections, allowing commands to be sent from any host on the network. Improper access control (CWE-284) ESC/POS does not define any mechanisms to restrict origins or destinations of communication. Many printers listen for ESC/POS communication on TCP port 9100 by default, potentially allowing access from any host on the network. Cleartext transmission of sensitive information (CWE-319) ESC/POS command transmission does not provide encryption or integrity protection mechanisms, and communicate is performed in plaintext. Consequently, attackers on the same network could be able to intercept or tamper with transmitted data. JPCERT/CC has assigned CVE-2026-23767 to the vulnerability originating from the ESC/POS specification. This document was written by Seiko Epson Corporation and JPCERT/CC. The issue regarding the lack of an authentication mechanism was reported to Seiko Epson Corporation by Michael Cook (FutileSkills), and coord…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-006102