Unquoted Windows Service Executable Path Vulnerability in IJ Scan Utility by Canon

CVE-2026-1585

What is CVE-2026-1585?

A vulnerability in the IJ Scan Utility for Windows allows a local attacker to exploit an unquoted executable path in Windows services. This could enable them to execute malicious files with the privileges of the affected service, potentially compromising system security and integrity. Users of versions 1.1.2 to 1.5.0 must take immediate action to secure their systems against potential exploitation.

References