CVE-2022-1026

Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.

Affected

Kyocera · Multifunction Printer Net Viewer

CVSS v3.1 NVD

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

14.62% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high · CWE-522

Published

2022-04-04

Updated

2024-09-16

Proof-of-concept exploits (6)

• ac3lives/kyocera-cve-2022-102626★ · 2023-03-15
• flamebarke/nmap-printer-nse-scripts2★ · 2023-07-15
• r0lh/kygocera0★ · 2024-06-13
• D4RKMATT3R/KyoceraCredsDump7★ · 2026-04-22
• h4po0n/kyocera-cve-2022-1026_SOAP1.12★ · 2025-12-23
• ushst/getKyoceraCreds0★ · 2026-06-10

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml

Security advisories

• https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04…
• https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-e…

References

• CVE Record
• NVD entry

Related

• CVE-2020-7387
• CVE-2020-7388
• CVE-2018-7600
• CVE-2019-8449
• CVE-2020-7247
• CVE-2026-54121