CCanon Inc.

Products

Exploited and recent CVEs

• CVE-2026-9262 Medium 6.5 Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.3%
• CVE-2026-9262 Medium 6.5 Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.3%
• CVE-2026-9261 Medium 6.8 Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9261 Medium 6.8 Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9260 Medium 6.2 Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9260 Medium 6.2 Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9259 Medium 6.5 Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9259 Medium 6.5 Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.2%
• CVE-2026-9258 Medium 6.5 Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.3%
• CVE-2026-9258 Medium 6.5 Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier 0.3%
• CVE-2026-6892 Medium 5.0 Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installati 0.1%
• CVE-2026-6892 Medium 5.0 Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installati 0.1%
• CVE-2026-6892 Medium 5.0 Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installati 0.1%
• CVE-2026-6891 Medium 5.0 Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link 0.1%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1789 Medium 4.9 A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers an 0.3%
• CVE-2026-1585 Medium 6.7 An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the 0.1%