← Vulnerability feed

Vulnerability record · CVE-2026-9258 · published 16 June 2026

CVE-2026-9258: Canon eos network setting tool improper certificate validation vulnerability

Canon · Eos Network Setting Tool

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

7.1 CVSS 4.0 High EPSS 0.50% · top 59.5% CWE-295 · Improper certificate validation
7.1CVSS 4.0 base score
0.50%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
18 Jun 2026Last modified by NVD

Description

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://canon.jp/support/support-info/260615vulnerability-response Vendor Advisory
https://psirt.canon/advisory-information/cp2026-005/ Vendor Advisory
https://www.canon-europe.com/support/product-security/ Vendor Advisory
https://www.usa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tool Vendor Advisory

Track CVE-2026-9258 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2026-9261Canon eos network setting tool broken cryptographic algorithm vulnerabilityUse of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlierEPSS 0.32%7.1CVE-2026-9262Canon eos network setting tool insecure default initialization vulnerabilityUse of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlierEPSS 0.46%7.1CVE-2026-9259Canon eos network setting tool improper certificate validation vulnerabilityImproper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlierEPSS 0.35%6.9CVE-2026-9260Canon eos network setting tool hard-coded credentials vulnerabilityUse of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlierEPSS 0.42%9.8CVE-2026-85102Checkpoint gaia embedded improper certificate validation vulnerabilityImproper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to …KEVEPSS 0.99%5.5CVE-2023-41991Apple iOS, iPadOS and macOS certificate validation bypassApple iOS, iPadOS and macOS contain an improper certificate validation flaw (CWE-295) that lets a malicious app bypass signature validation. Apple st…KEVEPSS 13%analysed7.8CVE-2023-20963Android WorkSource parcel mismatch local privilege escalationCVE-2023-20963 is a parcel mismatch in Android's WorkSource component that allows a local attacker to escalate privileges without additional executio…KEVEPSS 1.5%analysed8.8CVE-2022-26923Microsoft Active Directory Domain Services certificate validation privilege escalationActive Directory Domain Services fails to properly validate certificate attributes, allowing a low-privileged domain user to obtain a certificate tha…KEVEPSS 84%analysed

Source: NIST National Vulnerability Database (record CVE-2026-9258), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.