How severe is CVE-2026-73542?

CVE-2026-73542 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2026-73542 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2026-73542?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2026-73542 published?

CVE-2026-73542 was published on 2026-08-20.

CVE-2026-73542

CVE-2026-73542 is a low-severity vulnerability with a CVSS 3.x base score of 3.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-296.

Key facts

Severity: Low (CVSS 3.x base score 3.7)
CVSS v4: 6.3
EPSS exploit prediction: 0% (1st percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-296
Published: 2026-08-20
Last modified: 2026-08-20

Description

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.

Frequently asked questions

What is CVE-2026-73542?: Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.
How severe is CVE-2026-73542?: CVE-2026-73542 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2026-73542 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2026-73542?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2026-73542 published?: CVE-2026-73542 was published on 2026-08-20.

References

Other CWE-296 vulnerabilities

CVE-2025-48057 — Critical (CVSS 9.8): Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and…
CVE-2026-24066 — High (CVSS 8.4): Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool,…
CVE-2025-1146 — High (CVSS 8.1): CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to…
CVE-2026-44852 — High (CVSS 7.2): An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A…
CVE-2026-33779 — Medium (CVSS 6.5): An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX…
CVE-2024-43196 — Medium (CVSS 4.3): IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the…

Browse all CWE-296 vulnerabilities →