CVE-2026-124578 · Infrastructure
NO FIX YET
The Pantum BP5100DW printer firmware 3.A.4.7 has a flaw in an unknown function of its web interface file /shtml/omDB.shtml that lacks authentication. A remote attacker can reach that page without logging in.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running a Pantum BP5100DW printer on firmware 3.A.4.7 with its web interface reachable from the network are exposed. Printers kept off the network or behind login-protected access can skip this for now. The sources do not say whether the vendor has released a patch, and the vendor did not respond to disclosure.
Not affected if no-network-access, other-firmware-version
Who cares firmware, pantum, printer, web-interface
3.A.4.7/shtml/omDB.shtml answers without a login from the network segment where the printer sitsNo fix yet, per the sources.
A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.