by Kastro
Paper/Archive/CVE-2026-9259

CVE-2026-9259

Canon Inc. EOS Network Setting Tool for Windows — Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
31
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 9.2.092 × 201.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Affected

ProductAffectedFixed inSource
EOS Network Setting Tool for Windows1.5.0 or earlier–CNA
EOS Network Setting Tool for macOS1.5.0 or earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Canon (CNA)7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Canon (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorypsirt.canon/advisory-information/cp2026-005advisorycanon.jp/support/support-info/260615vulnerability-responseadvisoryusa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tooladvisorycanon-europe.com/support/product-security