VulnSocial

CVE-2026-23767Disclosure(epson / sb-h50)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for epson sb-h50 systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

epson CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-306

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sb-h50
  • sb-h50_firmware
  • tm-h6000v
  • tm-h6000v_firmware

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-08); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
epson
Products
sb-h50sb-h50_firmwaretm-h6000vtm-h6000v_firmwaretm-l100tm-l100_firmwaretm-m10tm-m10_firmwaretm-m30tm-m30_firmware

1 version affected across 48 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-08: 1Mentions · 2026-03-28: 1PoC Mentioned / Linked · 2026-03-28: 1Exploit Tool / Code · 2026-03-28: 1Technical Details · 2026-03-08: 1Technical Details · 2026-03-28: 103-0803-28
Signal classification2 categories
Disclosure
150.0%
Exploit
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-03-081
Disclosure1
2026-03-281
Exploit1
Full discourse2 posts
  • DFIR Radar@DFIR_Radar
    Exploit

    Metasploit adds 3 new exploit modules including CVE-2026-23767 (ESC/POS printer RCE), CVE-2025-12548 (Eclipse Che unauthenticated RCE), and CVE-2023-2868 (Barracuda ESG command injection). Enhanced NTLM relay compatibility with Linux smbclient. #DFIR_Radar https://t.co/kTThThSAHp

    Post summary

    Metasploit has released functional exploit modules for three CVEs, confirming availability of exploit code but no evidence of active exploitation or remediation.

    10010439
    1.2K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-23767 ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls… https://www.cve.org/CVERecord?id=CVE-2026-23767

    Post summary

    The tweet references the disclosure of CVE-2026-23767, highlighting that ESC/POS lacks authentication and command‑authorization controls, but does not mention a PoC, exploit, patch, or active exploitation.

    00000263
    56.6K followersView on X
CPE platform detail48 entries

48 of 48 entries

PartVendorProductVersionTarget SWTarget HW
HWepsonsb-h50---
OSepsonsb-h50_firmware---
HWepsontm-h6000v---
OSepsontm-h6000v_firmware---
HWepsontm-l100---
OSepsontm-l100_firmware---
HWepsontm-m10---
OSepsontm-m10_firmware---
HWepsontm-m30---
OSepsontm-m30_firmware---
HWepsontm-m30ii---
HWepsontm-m30ii-h---
OSepsontm-m30ii-h_firmware---
HWepsontm-m30ii-s---
OSepsontm-m30ii-s_firmware---
HWepsontm-m30ii-sl---
OSepsontm-m30ii-sl_firmware---
OSepsontm-m30ii_firmware---
HWepsontm-m30iii---
HWepsontm-m30iii-h---
OSepsontm-m30iii-h_firmware---
OSepsontm-m30iii_firmware---
HWepsontm-m55---
OSepsontm-m55_firmware---
HWepsontm-p20---
OSepsontm-p20_firmware---
HWepsontm-p20ii---
OSepsontm-p20ii_firmware---
HWepsontm-p60ii---
OSepsontm-p60ii_firmware---
HWepsontm-p80---
OSepsontm-p80_firmware---
HWepsontm-p80ii---
OSepsontm-p80ii_firmware---
HWepsontm-t20ii---
OSepsontm-t20ii_firmware---
HWepsontm-t20iii---
OSepsontm-t20iii_firmware---
HWepsontm-t88vi---
HWepsontm-t88vi-ihub---
OSepsontm-t88vi-ihub_firmware---
OSepsontm-t88vi_firmware---
HWepsontm-t88vii---
OSepsontm-t88vii_firmware---
HWepsonub-e04---
OSepsonub-e04_firmware---
HWepsonub-r04---
OSepsonub-r04_firmware---

Explore more

Back to dashboardepson CVEssb-h50 vulnerabilities