CVE-2026-26050 HIGH

CVE-2026-26050

Vendor Ricoh Company, Ltd.
Product ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール
Weakness CWE-427
Published February 20, 2026
Last update February 20, 2026
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.

Key dates

02Disclosure timeline

February 20, 2026 CVE published
February 20, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-6790 Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer CVE-2024-2207 Sound Research SECOMN64 Escalation of Privilege CVE-2021-44206 Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service CVE-2026-28456 OpenClaw 2026.1.5 < 2026.2.14 - Arbitrary Code Execution via Unsafe Hook Module Path Handling CVE-2025-10089 Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S