CVE-2026-9258
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.
Risk Assessment
Improper validation of keys may lead to man-in-the-middle attacks, jeopardizing communication security.
Recommendation
It is recommended to update the tool to the latest version to improve SSH host key validation.
Other vulnerabilities in Canon EOS Network Setting Tool
See all- CVE-2026-9262Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.
- CVE-2026-9261Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.
- CVE-2026-9260Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.
- CVE-2026-9259Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.
Original NVD description (English source)
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier