Is CVE-2026-50100 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-50100 being exploited in the wild.

How severe is CVE-2026-50100?

High severity, with a CVSS score of 7.8, published 15 June 2026.

Which products and versions are affected?

Konica Minolta 1422W PC FAX Driver 13.0 and earlier; Konica Minolta 1422W PS Driver 1.3.0.0 and earlier; Konica Minolta 1422W RPCS Driver 1.5.0.0 and earlier.

Is there a fix for CVE-2026-50100?

A patch was published on 2026-06-15. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-50100 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-50100?

Check whether you run Konica Minolta 1422W PC FAX Driver, Konica Minolta 1422W PS Driver, Konica Minolta 1422W RPCS Driver or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-50100: Ricoh and Konica Minolta printer drivers privilege escalation

CVE-2026-50100 · Severity: high · CVSS 7.8 · Published 2026-06-15

Multiple printer and fax drivers from Ricoh and Konica Minolta contain a security flaw that allows a user with low-level access to a computer to gain full administrative control. This vulnerability affects software used to manage printing and faxing tasks on corporate workstations. If exploited, an attacker who has already gained basic access to a system could take over the machine, potentially leading to data theft or the installation of persistent malware.

Vendors: Ricoh.

Quick answers

Is CVE-2026-50100 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-50100 being exploited in the wild.
How severe is CVE-2026-50100?: High severity, with a CVSS score of 7.8, published 15 June 2026.
Which products and versions are affected?: Konica Minolta 1422W PC FAX Driver 13.0 and earlier; Konica Minolta 1422W PS Driver 1.3.0.0 and earlier; Konica Minolta 1422W RPCS Driver 1.5.0.0 and earlier.
Is there a fix for CVE-2026-50100?: A patch was published on 2026-06-15. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-50100 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-50100?: Check whether you run Konica Minolta 1422W PC FAX Driver, Konica Minolta 1422W PS Driver, Konica Minolta 1422W RPCS Driver or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability exists in multiple printer and LAN-FAX drivers from Ricoh and Konica Minolta (specifically the 1422W series) due to an uncontrolled search path (CWE-427). The flaw allows a local attacker with standard user privileges to place a malicious DLL in a location searched by the driver, leading to arbitrary code execution with SYSTEM or administrative privileges. The attack requires local login access but no user interaction. Vendors have released updated drivers to address the issue; users are advised to update to the latest versions (e.g., RPCS Driver > 1.5.0.0 for Konica Minolta 1422W).

Affected products

KONICA MINOLTA JAPAN, INC. 1422W RPCS Driver 1.5.0.0 and earlier
KONICA MINOLTA JAPAN, INC. 1422W PS Driver 1.3.0.0 and earlier
KONICA MINOLTA JAPAN, INC. 1422W PC FAX Driver 13.0 and earlier
Ricoh Company, Ltd. Multiple Printer and LAN-FAX Drivers

Timeline

2026-06-15: disclosed
2026-06-15: advisory
2026-06-15: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.