CVE-2026-9262
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.
Risk Assessment
The use of an unencrypted FTP protocol exposes the organization to the risk of data interception and man-in-the-middle attacks. This can result in a loss of confidentiality of information.
Recommendation
It is recommended to update the Canon EOS Network Setting Tool to the latest version and configure a secure FTP protocol or an alternative encrypted solution.
Other vulnerabilities in Canon EOS Network Setting Tool
See all- CVE-2026-9261Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.
- CVE-2026-9260Medium
The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.
- CVE-2026-9259Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.
- CVE-2026-9258Medium
The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.
Original NVD description (English source)
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier