CVE-2026-124578
Deferred Deferred - Pending Action

Authentication Bypass in Pantum BP5100DW Printer

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: VulDB

Description
A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-124578
EUVD
EUVD-2026-119866

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pantum bp5100dw 3.a.4.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authentication issue in the Pantum BP5100DW printer model 3.A.4.7. It exists in the web interface component, specifically in the file /shtml/omDB.shtml. The flaw allows remote attackers to bypass authentication and potentially access sensitive functions without proper credentials.

Impact Analysis

An attacker could exploit this to gain unauthorized access to the printer's web interface. This may allow them to view or modify printer settings, intercept print jobs, or use the device as a foothold to launch further attacks on the connected network.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data processed by the printer, such as documents containing personal or health information. This may violate GDPR or HIPAA requirements for data protection and access control, potentially resulting in compliance violations and legal penalties.

Mitigation Strategies

Immediately restrict access to the Pantum BP5100DW web interface from untrusted networks. Disable remote access if possible and update the device firmware if a patch becomes available. Monitor network traffic for unauthorized access attempts to /shtml/omDB.shtml.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-124578. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...