# Path traversal in Fujifilm Business Innovation Corp. Apeos 3060 / 2560 / 1860 Japan model and others

CVE record · `CVE-2026-78249`

- **Identifiers:** `CVE-2026-78249`
- **State:** Confirmed
- **Severity:** CVSS 6.8 Medium
- **Critical:** No
- **CNA:** FB
- **Weakness (CWE):** [CWE-22](https://cwe.mitre.org/data/definitions/22.html)
- **Tags:** [Path traversal](https://agentprime.io/advisories/tag/path-traversal.md)
- **Technologies:** [Fujifilm Business Innovation Corp. Apeos 3060 / 2560 / 1860 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-3060-2560-1860-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos 3061 / 2561 / 2061 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-3061-2561-2061-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos 4570 / 3570 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-4570-3570-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos 5330 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-5330-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos 6340 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-6340-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos 7580 / 6580 / 5580 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-7580-6580-5580-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C2360 / C2060 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c2360-c2060-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C3061 / C2561 / C2061 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c3061-c2561-c2061-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C3567 / C3067 / C2567 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c3567-c3067-c2567-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C4030/C3530 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c4030-c3530-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C5240 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c5240-japan-model.md) · [Fujifilm Business Innovation Corp. Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c7070-c6570-c5570-c4570-c3570-c3070-c257.md) · [Fujifilm Business Innovation Corp. Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c7071-c6571-c5571-c4571-c3571-c3071-c257.md) · [Fujifilm Business Innovation Corp. Apeos C8180 / C7580 / C6580 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeos-c8180-c7580-c6580-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint 4560 S / 3960 S / 3360 S Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-4560-s-3960-s-3360-s-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint 4830 / 4830 JM Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-4830-4830-jm-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint 6340 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-6340-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint C3560 S / C3060 S Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-c3560-s-c3060-s-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint C4030 / C3530 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-c4030-c3530-japan-model.md) · [Fujifilm Business Innovation Corp. ApeosPrint C5240 Japan model](https://agentprime.io/advisories/technology/fujifilm-business-innovation-corp-apeosprint-c5240-japan-model.md)
- **Published:** 1 Oct 2026
- **Updated:** 1 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: FB) at 1 Oct 2026, 07:56 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 3060 / 2560 / 1860 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 3061 / 2561 / 2061 Japan model.
  - affected: `1.0.3 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 4570 / 3570 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 5330 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 6340 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 7580 / 6580 / 5580 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C2360 / C2060 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C3061 / C2561 / C2061 Japan model.
  - affected: `1.1.103 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C3567 / C3067 / C2567 Japan model.
  - affected: `1.1.3 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C4030/C3530 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C5240 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model.
  - affected: `1.1.3 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C8180 / C7580 / C6580 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint 4560 S / 3960 S / 3360 S Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint 4830 / 4830 JM Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint 6340 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint C3560 S / C3060 S Japan model.
  - affected: `1.20.105 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint C4030 / C3530 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint C5240 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPrint C5570 / C4570 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: ApeosPro C810 / C750 / C650 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Revoria Press E1136 / E1125/ E1110 / E1100 Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Revoria Press E1136P/E1125P/E1110P Japan model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Revoria Press EC1100 Japan model.
  - affected: `1.22.11 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Revoria Press EC2100S / EC2100 Japan model.
  - affected: `1.1.4 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Revoria Press SC285S / SC285 Japan model.
  - affected: `1.1.0 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: RevoriaPress SC180 / SC170 Japan model.
  - affected: `1.23.6 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 3560 / 3060 / 2560 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 3561 / 3061 / 2561 Asia Pacific model.
  - affected: `1.0.3 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 5330 / 4830 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 5570 / 4570 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 6340 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos 7580 / 6580 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C3060 / C2560 / C2060 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C3061 / C2561 / C2061 Asia Pacific model.
  - affected: `1.1.103 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C3567 / C3067 / C2567 Asia Pacific model.
  - affected: `1.1.3 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C4030/C3530 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C5240 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected
- Vendor: Fujifilm Business Innovation Corp.. Product: Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model.
  - affected: `1.50.5 or earlier`
  - Other versions: unaffected

And 29 more products. The full list is on the CVE record: <https://www.cve.org/CVERecord?id=CVE-2026-78249>

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 6.8 Medium, CVSS 4.0: `CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N`, from CNA (FB)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 1 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-78249](https://www.cve.org/CVERecord?id=CVE-2026-78249)
- [NVD: CVE-2026-78249](https://nvd.nist.gov/vuln/detail/CVE-2026-78249)

### References from the CNA

- <https://www.fujifilm.com/fb/en/news/15736e>
- <https://global.sharp/corporate/info/product-security/advisory-list/2026-006/>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-78249>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-78249/>. Everything for agents: <https://agentprime.io/llms.txt>.
