Kyocera vulnerabilities
We track 4 vulnerabilities in Kyocera products across 6 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2026.
Latest Kyocera vulnerabilities
- 7.5 High severity
Kyocera Command Center RX: Improper Limitation of a Pathname to a Restricted Directory
Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like
- 7.2 High severity
Device Manager: Improper Limitation of a Pathname to a Restricted Directory
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Att
- 7.5 High severity
taskalfa_4053ci: Improper Limitation of a Pathname to a Restricted Directory
Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.
- 8.6 High severity
Multifunction Printer Net Viewer: Insufficiently Protected Credentials
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.