CVE-2019-13195: Kyocera Ecosys m5526cdw Firmware

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system.

Affected products

  • Kyocera Ecosys m5526cdw Firmware: version 2r7_2000.001.701 only

Published 2020-03-13. Last modified 2026-06-17.