Default Credential Vulnerability in IRISPowerscan by Canon
CVE-2026-94459

7.2HIGH

Key Information:

Vendor

I.r.i.s S.a.

Status
Irispowerscan
Vendor
CVE Published:
4 November 2026

What is CVE-2026-94459?

IRISPowerscan by Canon contains default user accounts with predictable credentials, allowing unauthenticated attackers to gain unauthorized access to the application. This vulnerability enables malicious users to authenticate using these weak credentials, potentially leading to unauthorized modification of application data and configuration settings, thereby compromising the integrity and security of the application.

Affected Version(s)

IRISPowerscan Windows 0 <= 12.3

References

https://www.canon-europe.com/psirt/advisory-information
vendor-advisorymitigationpatch

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Paul van der Haas working with Orange Cyberdefense
.