[ CVE-2026-81310 · Published 30 Sep 2026 ]

Vulnerability in PFU Limited Image Scanner Driver for Linux (fi Series)

CVSS 6.6 EPSS <1%No fix listed yet

[ Description ]Official description

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

[ Facts ]Key facts

CVE: CVE-2026-81310
EUVD: EUVD-2026-89568
Published: 30 Sep 2026, 02:16 UTC
Updated: 30 Sep 2026, 17:16 UTC
NVD status: Awaiting Analysis
CVSS 3.1: 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Scored by vultures@jpcert.or.jp
EPSS: 0.12% chance of exploitation in 30 days · higher than 2% of CVEs
CISA SSVC: Exploitation: none · Automatable: no · Impact: partial
Weakness: CWE-59

[ Affected ]Affected products

PFU Limited Image Scanner Driver for Linux (fi Series)2.0.0, 2.1.0 – ≤ 2.1.1, 2.3.2, 2.5.0, 2.7.0 – ≤ 2.7.1, 2.8.0 – ≤ 2.8.2
PFU Limited Image Scanner Driver for Linux (SP Series)2.0.0, 2.1.0 – ≤ 2.1.1-4, 2.2.0 – ≤ 2.2.2, 2.3.0