CVE-2026-101040

MEDIUM 6.5

Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-404
Vendor	ricoh
Product	sp 330dn
Published	Sep 28, 2026

Stay Ahead of the Next One

Get instant alerts for ricoh sp 330dn

Be the first to know when new medium vulnerabilities affecting ricoh sp 330dn are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Ricoh / SP 330DN

20260813

Ricoh / SP 221

20260813

Ricoh / SP C252SF

20260813

Ricoh / Aficio SP 3500SF

20260813

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/410908 vuldb.com: https://vuldb.com/vuln/410908/cti vuldb.com: https://vuldb.com/cve/CVE-2026-101040 vuldb.com: https://vuldb.com/submit/927274 vuldb.com: https://vuldb.com/submit/927275 vuldb.com: https://vuldb.com/submit/927289 vuldb.com: https://vuldb.com/submit/927478 github.com: https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop github.com: https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py

Credits

🔍 xiaobor123 (VulDB User) VulDB CNA Team