CVE-2025-11155: Sato s86-Ex 203dpi

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.

Affected products

• Sato s86-Ex 203dpi: version 61.00.00.09 only

Published 2025-09-29. Last modified 2026-10-09.