Hard-Coded Cryptographic Keys in Canon EOS Network Tool
CVE-2026-9260

6.9MEDIUM

Key Information:

Vendor

Canon Inc.

Status
Eos Network Setting Tool For Windows
Eos Network Setting Tool For Mac OS
Vendor
CVE Published:
15 June 2026

What is CVE-2026-9260?

The Canon EOS Network Setting Tool, specifically Version 1.5.0 and earlier, is susceptible to a vulnerability that arises from using hard-coded cryptographic keys. This security flaw can potentially allow unauthorized access to sensitive information, as attackers may exploit these keys to circumvent security protocols. Users of the affected software are advised to upgrade to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

EOS Network Setting Tool for macOS 1.5.0 or earlier

EOS Network Setting Tool for Windows 1.5.0 or earlier

References

https://psirt.canon/advisory-information/cp2026-005/
vendor-advisory
https://canon.jp/support/support-info/260615vulnerability...
vendor-advisory
https://www.usa.canon.com/about-us/to-our-customers/cpa20...
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Ryan Hausknecht (@haus3c)
.