---
id: "CVE-2026-124578"
page: "https://infrastack.ai/live/CVE-2026-124578"
kind: "vulnerability"
aliases: ["CVE-2026-124578"]
title: "Pantum BP5100DW printer: web interface lets remote users skip authentication"
severity: "medium"
cvss: 6.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["firmware", "infrastructure", "pantum", "printer", "web-interface"]
not_affected_if: ["no-network-access", "other-firmware-version"]
published_at: "2026-11-09T08:17:02+00:00"
first_seen_at: "2026-11-09T08:25:21+00:00"
updated_at: "2026-11-09T08:25:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124578", "first_seen_at": "2026-11-09T08:25:21+00:00"}]
exploit_sources: []
---

# Pantum BP5100DW printer: web interface lets remote users skip authentication

Link for people: https://infrastack.ai/live/CVE-2026-124578 (this .md is for agents)

The Pantum BP5100DW printer firmware 3.A.4.7 has a flaw in an unknown function of its web interface file /shtml/omDB.shtml that lacks authentication. A remote attacker can reach that page without logging in.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the printer's firmware version in its web admin page or on its settings panel against `3.A.4.7`
- Test whether `/shtml/omDB.shtml` answers without a login from the network segment where the printer sits

## Timeline

- 2026-11-09T08:25:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124578

## From the sources

A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_