CVE-2026-81310
Received Received - Intake

Link Following Vulnerability in Image Scanner Driver for Linux

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: JPCERT/CC

Description
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-81310
EUVD
EUVD-2026-89568

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
pfu_limited image_scanner_driver_for_linux From 2.0.0 (inc) to 2.8.2 (inc)
pfu_limited image_scanner_driver_for_linux From 2.0.0 (inc) to 2.3.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a link following issue in the Image Scanner Driver for Linux. An attacker with local access to a Linux system where the driver is installed can overwrite arbitrary files by exploiting a special method.

Detection Guidance

To detect CVE-2026-81310, check if the Image Scanner Driver for Linux is installed and verify its version. Compare installed versions against affected releases (fi Series V2.0.0 to V2.8.2 and SP Series V2.0.0 to V2.3.0). Use commands like 'dpkg -l | grep image_scanner_driver' or 'rpm -qa | grep image_scanner_driver' to list installed packages.

Impact Analysis

An attacker could overwrite critical system files, leading to system instability, data corruption, or unauthorized privilege escalation. This may allow them to gain control over the affected system.

Compliance Impact

This vulnerability allows attackers to overwrite arbitrary files with high privileges, which could lead to unauthorized data access or modification. Such file manipulation may violate compliance requirements under GDPR (data integrity and confidentiality) and HIPAA (integrity and availability of protected health information).

Mitigation Strategies

Update the Image Scanner Driver for Linux to the latest version to patch the link following vulnerability. Restrict user permissions to prevent unauthorized file overwrites and monitor system logs for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81310. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart