Link following in Image Scanner Driver for Linux (fi Series) and Image Scanner Driver for Linux (SP Series) - CVE-2026-81310

 

Link following in Image Scanner Driver for Linux (fi Series) and Image Scanner Driver for Linux (SP Series) - CVE-2026-81310

Published: September 29, 2026


Vulnerability identifier: #VU152760
CSH Severity: Low
CVSS v4: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-81310
CWE-ID: CWE-59
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to an insecure link following issue. A local user can use a special method in advance to overwrite arbitrary files on the system.


Affected software

Image Scanner Driver for Linux (fi Series)
Image Scanner Driver for Linux (SP Series)

How to mitigate CVE-2026-81310

Install updates from vendor's website.


External References

Related Security Bulletins