CVE-2026-23767: Epson Sb-h50 Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

Affected products

• Epson Sb-h50 Firmware: affected versions not specified
• Epson TM-h6000v Firmware: affected versions not specified
• Epson TM-l100 Firmware: affected versions not specified
• Epson TM-m10 Firmware: affected versions not specified
• Epson TM-m30 Firmware: affected versions not specified
• Epson TM-m30ii-H Firmware: affected versions not specified
• Epson TM-m30ii-S Firmware: affected versions not specified
• Epson TM-m30ii-Sl Firmware: affected versions not specified
• Epson TM-m30ii Firmware: affected versions not specified
• Epson TM-m30iii-H Firmware: affected versions not specified
• Epson TM-m30iii Firmware: affected versions not specified
• Epson TM-m55 Firmware: affected versions not specified
• Epson TM-p20 Firmware: affected versions not specified
• Epson TM-p20ii Firmware: affected versions not specified
• Epson TM-p60ii Firmware: affected versions not specified
• Epson TM-p80 Firmware: affected versions not specified
• Epson TM-p80ii Firmware: affected versions not specified
• Epson TM-t20ii Firmware: affected versions not specified
• Epson TM-t20iii Firmware: affected versions not specified
• Epson TM-t88vi-Ihub Firmware: affected versions not specified
• Epson TM-t88vi Firmware: affected versions not specified
• Epson TM-t88vii Firmware: affected versions not specified
• Epson Ub-e04 Firmware: affected versions not specified
• Epson Ub-r04 Firmware: affected versions not specified

Published 2026-03-05. Last modified 2026-06-17.