Description
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kyocera | Multifunction Printer Net Viewer | 2S0_1000.005.0012S5_2000.002.505 – ≤ 2S0_1000.005.0012S5_2000.002.505 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
ac3lives/kyocera-cve-2022-1026 ★ 26 · Mar 15, 2023
An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords
-
D4RKMATT3R/KyoceraCredsDump ★ 7 · Apr 22, 2026
Kyocera cred dumper based on CVE-2022-1026
-
h4po0n/kyocera-cve-2022-1026_SOAP1.1 ★ 2 · Dec 22, 2025
An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords.
-
flamebarke/nmap-printer-nse-scripts ★ 2 · Jul 15, 2023
NSE port of CVE-2022-1026 exploit for mass identification and exploitation
-
r0lh/kygocera ★ 0 · Jun 13, 2024
Improved Golang Version of Rapid7 PoC for CVE-2022-1026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Kyocera Net View Address Book Exposure http/cves/2022/CVE-2022-1026.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.