CVE-2026-1789

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1789", "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "state": "PUBLISHED", "assignerShortName": "Canon", "dateReserved": "2026-02-03T04:38:23.956Z", "datePublished": "2026-04-23T23:38:11.157Z", "dateUpdated": "2026-04-24T18:18:56.812Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon", "dateUpdated": "2026-04-23T23:38:11.157Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-807", "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", "type": "CWE"}]}], "affected": [{"vendor": "Canon Inc.", "product": "imagePRESS Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageFORCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER ADVANCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7525F", "versions": [{"status": "affected", "version": "v15.00 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7625F", "versions": [{"status": "affected", "version": "v8.12 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7725F", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X C1538iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X MF1538C II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS C1533iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS X C1538 iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS MF842Cdw", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CX", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers."}]}], "references": [{"url": "https://psirt.canon/advisory-information/cp2026-003/", "tags": ["vendor-advisory"]}, {"url": "https://canon.jp/support/support-info/260423vulnerability-response", "tags": ["vendor-advisory"]}, {"url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers", "tags": ["vendor-advisory"]}, {"url": "https://www.canon-europe.com/support/product-security/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-24T16:47:36.800110Z", "id": "CVE-2026-1789", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T18:18:56.812Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1789", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-24T16:47:36.800110Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T16:50:25.713Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Canon Inc.", "product": "imagePRESS Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageFORCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER ADVANCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7525F", "versions": [{"status": "affected", "version": "v15.00 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7625F", "versions": [{"status": "affected", "version": "v8.12 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7725F", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X C1538iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X MF1538C II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS C1533iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS X C1538 iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS MF842Cdw", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CX", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}], "references": [{"url": "https://psirt.canon/advisory-information/cp2026-003/", "tags": ["vendor-advisory"]}, {"url": "https://canon.jp/support/support-info/260423vulnerability-response", "tags": ["vendor-advisory"]}, {"url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers", "tags": ["vendor-advisory"]}, {"url": "https://www.canon-europe.com/support/product-security/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-807", "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision"}]}], "providerMetadata": {"orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon", "dateUpdated": "2026-04-23T23:38:11.157Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1789", "state": "PUBLISHED", "dateUpdated": "2026-04-24T18:18:56.812Z", "dateReserved": "2026-02-03T04:38:23.956Z", "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "datePublished": "2026-04-23T23:38:11.157Z", "assignerShortName": "Canon"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "imagePRESS Series", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "all version"}]}, {"product": "imageFORCE Series", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "all version"}]}, {"product": "imageRUNNER ADVANCE Series", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "all version"}]}, {"product": "imageRUNNER Series", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "all version"}]}, {"product": "Satera MF7525F", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v15.00 or earlier"}]}, {"product": "Satera MF7625F", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v8.12 or earlier"}]}, {"product": "Satera MF7725F", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "Satera MF842CDW", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "imageCLASS X C1538iF II", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "imageCLASS X MF1538C II", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "i-SENSYS C1533iF II", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "i-SENSYS X C1538 iF II", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "i-SENSYS MF842Cdw", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "MF842CDW", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"product": "MF842CX", "vendor": "Canon Inc.", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n remota basada en navegador puede permitir a un administrador acceder a informaci\u00f3n sensible en el dispositivo a trav\u00e9s de solicitudes manipuladas, afectando a ciertas impresoras de producci\u00f3n y a impresoras multifunci\u00f3n de oficina/peque\u00f1a oficina."}], "id": "CVE-2026-1789", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1789", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-24T16:47:36.800110Z", "version": "2.0.3"}}]}, "published": "2026-04-24T00:16:26.400", "references": [{"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://canon.jp/support/support-info/260423vulnerability-response"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://psirt.canon/advisory-information/cp2026-003/"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://www.canon-europe.com/support/product-security/"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers"}], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-807"}], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_c1533if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_c1533if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_x_c1538_if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_x_c1538_if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageclass_x_c1538if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imageclass_x_c1538if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageclass_x_mf1538c_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imageclass_x_mf1538c_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "imageFORCE Series", "source": "cna", "vendor": "Canon Inc."}, "product": "imageforce_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageforce_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imagepress_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "imageRUNNER ADVANCE Series", "source": "cna", "vendor": "Canon Inc."}, "product": "imagerunner_advance_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imagerunner_advance_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imagerunner_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imagerunner_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "mf842cx", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "mf842cx", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v15.00]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7525f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v15.00]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7525f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v8.12]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7625f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v8.12]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7625f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7725f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7725f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf842cdw", "vendor": "canon"}], "analysis": {"en": {"generated_at": "2026-04-28T07:14:03.055154+00:00", "value": {"mitigation_remediation": ["Check for and apply any firmware update that addresses the sensitive information disclosure.", "Disable or restrict access to the browser\u2011based remote management interface if it is not required for operational purposes.", "Segment the network and enforce firewall rules so that only trusted administrative devices can reach the printer\u2019s management interface."], "summary": {"action": "Assess Impact", "impact": "Sensitive Data Disclosure"}, "threat_synthesis": {"affected_systems": "Canon Inc. production printers and office/small office multifunction printers, including models such as MF842CDW, MF842CX, Satera MF7525F, Satera MF7625F, Satera MF7725F, Satera MF842CDW, i-SENSYS C1533iF II, i-SENSYS MF842Cdw, i-SENSYS X C1538 iF II, imageCLASS X C1538iF II, imageCLASS X MF1538C II, imageFORCE Series, imagePRESS Series, imageRUNNER ADVANCE Series, and imageRUNNER Series. No specific firmware versions are listed as affected.", "description_and_impact": "A vulnerability in the browser-based remote management interface enables an attacker to submit crafted requests that reveal sensitive information stored on the device. The weakness is classified as CWE-807, indicating a failure to properly restrict operations within the security context. This flaw allows an authenticated or unauthenticated attacker to gain access to confidential data that should be protected from external inspection.", "risk_and_exploitability": "The vulnerability carries a CVSS score of 6.9, placing it in the moderate severity range. Its EPSS score is less than 1%, indicating that active exploitation is unlikely at present. The issue is not listed in the CISA KEV catalog. The likely attack scenario requires network access to the printer\u2019s remote management interface and may need administrative authentication; an attacker could send malicious requests from within the local network or through a compromised network perimeter. Due to the limited reach and moderate score, the overall risk to the organization is moderate but should be mitigated to prevent potential data leakage."}}}}, "created": "2026-04-28T07:15:19.380724+00:00", "title": "Browser\u2011Based Remote Management Interface May Expose Sensitive Device Information in Canon Printers", "updated": "2026-04-28T09:25:41.298963+00:00", "vendors": ["canon", "canon$PRODUCT$i-sensys_c1533if_ii", "canon$PRODUCT$i-sensys_mf842cdw", "canon$PRODUCT$i-sensys_x_c1538_if_ii", "canon$PRODUCT$imageclass_x_c1538if_ii", "canon$PRODUCT$imageclass_x_mf1538c_ii", "canon$PRODUCT$imageforce_series", "canon$PRODUCT$imagepress_series", "canon$PRODUCT$imagerunner_advance_series", "canon$PRODUCT$imagerunner_series", "canon$PRODUCT$mf842cdw", "canon$PRODUCT$mf842cx", "canon$PRODUCT$satera_mf7525f", "canon$PRODUCT$satera_mf7625f", "canon$PRODUCT$satera_mf7725f", "canon$PRODUCT$satera_mf842cdw"]}