Insecure Default Configuration in IRISPowerscan by Canon
CVE-2026-94460

7.2HIGH

Key Information:

Vendor

I.r.i.s S.a.

Status
Irispowerscan
Vendor
CVE Published:
4 November 2026

What is CVE-2026-94460?

IRISPowerscan by Canon is susceptible to an insecure default configuration that assigns elevated privileges to the built-in installation account with a predictable password. This vulnerability enables an unauthenticated attacker to exploit the application, gaining unauthorized access to sensitive functionalities. Proper mitigation is essential to safeguard against potential intrusions and protect user data.

Affected Version(s)

IRISPowerscan Windows 0 <= 12.3

References

https://www.canon-europe.com/psirt/advisory-information
vendor-advisorymitigationpatch

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Paul van der Haas working with Orange Cyberdefense
.