CVE-2026-9262

Analyzed Analyzed - Analysis Complete

Non-secure FTP Protocol Default in Canon EOS Network Setting Tool

Publication date: 2026-06-16

Last updated on: 2026-06-18

Assigner: Canon Inc.

Description

Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-16

Last Modified

2026-06-18

Generated

2026-07-06

AI Q&A

2026-06-16

EPSS Evaluated

2026-07-04

NVD

CVE-2026-9262

EUVD

EUVD-2026-37022

Affected Vendors & Products

Vendor	Product	Version / Range
canon	eos_network_setting_tool	to 1.5.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1188	The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

Attack-Flow Graph

Executive Summary

This vulnerability involves the use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier.

Impact Analysis

Using a non-secure FTP protocol can expose data transmitted between the client and server to interception or eavesdropping by unauthorized parties, potentially leading to data exposure or compromise.

Mitigation Strategies

To mitigate this vulnerability, update the EOS Utility software to the latest version, Ver.3.20.21 or later.

The affected versions of the EOS Network Setting Tool are Ver.1.5.0 and earlier, included in EOS Utility versions Ver.3.12.0 to Ver.3.20.20 for both Windows and macOS.

Compliance Impact

The vulnerability involves the use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier. This could potentially expose authentication credentials during FTP communications.

Exposure of authentication credentials through insecure protocols may lead to unauthorized access to sensitive data, which can impact compliance with data protection regulations such as GDPR and HIPAA that require protection of personal and health information.

Therefore, this vulnerability could pose a risk to compliance with these standards by failing to ensure adequate security controls for data transmission.

Hi! I’m here to help you understand CVE-2026-9262. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70