by Kastro
Paper/Archive/CVE-2026-9258

CVE-2026-9258

Canon Inc. EOS Network Setting Tool for Windows — Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
33
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 18.9.189 × 203.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Affected

ProductAffectedFixed inSource
EOS Network Setting Tool for Windows1.5.0 or earlier–CNA
EOS Network Setting Tool for macOS1.5.0 or earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Canon (CNA)7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Canon (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorypsirt.canon/advisory-information/cp2026-005advisorycanon.jp/support/support-info/260615vulnerability-responseadvisoryusa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tooladvisorycanon-europe.com/support/product-security