CVE-2026-9260
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.
Risk Assessment
The use of hard-coded cryptographic keys increases the risk of system compromise, potentially leading to loss of data confidentiality.
Recommendation
It is recommended to update the tool to the latest version to eliminate hard-coded cryptographic keys.
Other vulnerabilities in Canon EOS Network Setting Tool
See all- CVE-2026-9262Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.
- CVE-2026-9261Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.
- CVE-2026-9259Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.
- CVE-2026-9258Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.
Original NVD description (English source)
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier