by Kastro
Paper/Archive/CVE-2026-9260

CVE-2026-9260

Canon Inc. EOS Network Setting Tool for Windows — Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
32
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 14.2.142 × 202.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Affected

ProductAffectedFixed inSource
EOS Network Setting Tool for Windows1.5.0 or earlier–CNA
EOS Network Setting Tool for macOS1.5.0 or earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Canon (CNA)6.9CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Canon (CNA)6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

advisorypsirt.canon/advisory-information/cp2026-005advisorycanon.jp/support/support-info/260615vulnerability-responseadvisoryusa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tooladvisorycanon-europe.com/support/product-security