CVE-2026-9259
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.
Risk Assessment
Improper validation of certificates may allow attackers to intercept data transmitted between the user and the server, posing a serious threat to information security.
Recommendation
It is recommended to update the Canon EOS Network Setting Tool to the latest version to ensure proper validation of server certificates.
Other vulnerabilities in Canon EOS Network Setting Tool
See all- CVE-2026-9262Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.
- CVE-2026-9261Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.
- CVE-2026-9260Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.
- CVE-2026-9258Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.
Original NVD description (English source)
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier