{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1789", "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "state": "PUBLISHED", "assignerShortName": "Canon", "dateReserved": "2026-02-03T04:38:23.956Z", "datePublished": "2026-04-23T23:38:11.157Z", "dateUpdated": "2026-04-24T18:18:56.812Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon", "dateUpdated": "2026-04-23T23:38:11.157Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-807", "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", "type": "CWE"}]}], "affected": [{"vendor": "Canon Inc.", "product": "imagePRESS Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageFORCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER ADVANCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7525F", "versions": [{"status": "affected", "version": "v15.00 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7625F", "versions": [{"status": "affected", "version": "v8.12 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7725F", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X C1538iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X MF1538C II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS C1533iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS X C1538 iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS MF842Cdw", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CX", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers."}]}], "references": [{"url": "https://psirt.canon/advisory-information/cp2026-003/", "tags": ["vendor-advisory"]}, {"url": "https://canon.jp/support/support-info/260423vulnerability-response", "tags": ["vendor-advisory"]}, {"url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers", "tags": ["vendor-advisory"]}, {"url": "https://www.canon-europe.com/support/product-security/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-24T16:47:36.800110Z", "id": "CVE-2026-1789", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T18:18:56.812Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1789", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-24T16:47:36.800110Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T16:50:25.713Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Canon Inc.", "product": "imagePRESS Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageFORCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER ADVANCE Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "imageRUNNER Series", "versions": [{"status": "affected", "version": "all version"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7525F", "versions": [{"status": "affected", "version": "v15.00 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7625F", "versions": [{"status": "affected", "version": "v8.12 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF7725F", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "Satera MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X C1538iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "imageCLASS X MF1538C II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS C1533iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS X C1538 iF II", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "i-SENSYS MF842Cdw", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CDW", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}, {"vendor": "Canon Inc.", "product": "MF842CX", "versions": [{"status": "affected", "version": "v16.04 or earlier"}]}], "references": [{"url": "https://psirt.canon/advisory-information/cp2026-003/", "tags": ["vendor-advisory"]}, {"url": "https://canon.jp/support/support-info/260423vulnerability-response", "tags": ["vendor-advisory"]}, {"url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers", "tags": ["vendor-advisory"]}, {"url": "https://www.canon-europe.com/support/product-security/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-807", "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision"}]}], "providerMetadata": {"orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon", "dateUpdated": "2026-04-23T23:38:11.157Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1789", "state": "PUBLISHED", "dateUpdated": "2026-04-24T18:18:56.812Z", "dateReserved": "2026-02-03T04:38:23.956Z", "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "datePublished": "2026-04-23T23:38:11.157Z", "assignerShortName": "Canon"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers."}], "id": "CVE-2026-1789", "lastModified": "2026-04-24T14:39:56.310", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}]}, "published": "2026-04-24T00:16:26.400", "references": [{"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://canon.jp/support/support-info/260423vulnerability-response"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://psirt.canon/advisory-information/cp2026-003/"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://www.canon-europe.com/support/product-security/"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers"}], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-807"}], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_c1533if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_c1533if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "i-sensys_x_c1538_if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "i-sensys_x_c1538_if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageclass_x_c1538if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imageclass_x_c1538if_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageclass_x_mf1538c_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imageclass_x_mf1538c_ii", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "imageFORCE Series", "source": "cna", "vendor": "Canon Inc."}, "product": "imageforce_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imageforce_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imagepress_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "imageRUNNER ADVANCE Series", "source": "cna", "vendor": "Canon Inc."}, "product": "imagerunner_advance_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imagerunner_advance_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "imagerunner_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "imagerunner_series", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "mf842cx", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "mf842cx", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v15.00]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7525f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v15.00]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7525f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v8.12]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7625f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v8.12]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7625f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf7725f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf7725f", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "satera_mf842cdw", "vendor": "canon"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v16.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "satera_mf842cdw", "vendor": "canon"}], "analysis": {"en": {"generated_at": "2026-04-28T07:14:03.055154+00:00", "value": {"mitigation_remediation": ["Check for and apply any firmware update that addresses the sensitive information disclosure.", "Disable or restrict access to the browser\u2011based remote management interface if it is not required for operational purposes.", "Segment the network and enforce firewall rules so that only trusted administrative devices can reach the printer\u2019s management interface."], "summary": {"action": "Assess Impact", "impact": "Sensitive Data Disclosure"}, "threat_synthesis": {"affected_systems": "Canon Inc. production printers and office/small office multifunction printers, including models such as MF842CDW, MF842CX, Satera MF7525F, Satera MF7625F, Satera MF7725F, Satera MF842CDW, i-SENSYS C1533iF II, i-SENSYS MF842Cdw, i-SENSYS X C1538 iF II, imageCLASS X C1538iF II, imageCLASS X MF1538C II, imageFORCE Series, imagePRESS Series, imageRUNNER ADVANCE Series, and imageRUNNER Series. No specific firmware versions are listed as affected.", "description_and_impact": "A vulnerability in the browser-based remote management interface enables an attacker to submit crafted requests that reveal sensitive information stored on the device. The weakness is classified as CWE-807, indicating a failure to properly restrict operations within the security context. This flaw allows an authenticated or unauthenticated attacker to gain access to confidential data that should be protected from external inspection.", "risk_and_exploitability": "The vulnerability carries a CVSS score of 6.9, placing it in the moderate severity range. Its EPSS score is less than 1%, indicating that active exploitation is unlikely at present. The issue is not listed in the CISA KEV catalog. The likely attack scenario requires network access to the printer\u2019s remote management interface and may need administrative authentication; an attacker could send malicious requests from within the local network or through a compromised network perimeter. Due to the limited reach and moderate score, the overall risk to the organization is moderate but should be mitigated to prevent potential data leakage."}}}}, "created": "2026-04-28T07:15:19.380724+00:00", "title": "Browser\u2011Based Remote Management Interface May Expose Sensitive Device Information in Canon Printers", "updated": "2026-04-28T09:25:41.298963+00:00", "vendors": ["canon", "canon$PRODUCT$i-sensys_c1533if_ii", "canon$PRODUCT$i-sensys_mf842cdw", "canon$PRODUCT$i-sensys_x_c1538_if_ii", "canon$PRODUCT$imageclass_x_c1538if_ii", "canon$PRODUCT$imageclass_x_mf1538c_ii", "canon$PRODUCT$imageforce_series", "canon$PRODUCT$imagepress_series", "canon$PRODUCT$imagerunner_advance_series", "canon$PRODUCT$imagerunner_series", "canon$PRODUCT$mf842cdw", "canon$PRODUCT$mf842cx", "canon$PRODUCT$satera_mf7525f", "canon$PRODUCT$satera_mf7625f", "canon$PRODUCT$satera_mf7725f", "canon$PRODUCT$satera_mf842cdw"]}