CVE-2026-9261
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.
Risk Assessment
The use of weak cryptographic algorithms may allow attackers to intercept or manipulate data transmitted over SSH, posing a serious risk to organizational security.
Recommendation
It is recommended to update the Canon EOS Network Setting Tool to the latest version to eliminate the use of weak cryptographic algorithms.
Other vulnerabilities in Canon EOS Network Setting Tool
See all- CVE-2026-9262Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.
- CVE-2026-9260Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.
- CVE-2026-9259Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.
- CVE-2026-9258Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.
Original NVD description (English source)
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier