Back to CVE records
Low 3.7Published Jan 28, 2026

CVE-2025-53869Multiple MFPs provided by Brother Industries, Ltd.

Updated under an hour ago ()

Does this affect you?

It affects Brother Industries, Ltd. Multiple MFPs and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates.

CVSS
3.7 LOW (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness (CWE)
CWE-295
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
jpcert
NVD analysis
Deferred
Record last updated
Jan 29, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Brother Industries, Ltd. Multiple MFPs
brother_industries:multiple_mfps (from the name)
see the information provided by the vendor
CNA record
Konica Minolta, Inc. Multiple MFPs
konica_minolta:multiple_mfps (from the name)
see the information provided by the vendor
CNA record
Ricoh Company, Ltd. Multiple MFPs
ricoh:multiple_mfps (from the name)
see the information provided by the vendor
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.