CVE Catalog
CVE-2026-58315
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
A CSRF vulnerability in SEIKO EPSON Web Config allows unintended operations if a user visits a malicious page while logged in.
Risk Assessment
An attacker could modify device configuration without user consent, e.g., change network settings.
Recommendation
Update Web Config to the latest version. Implement CSRF tokens.
Original NVD description (English source)
Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed.