CVE-2026-1789
CVSS Score
4.9
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
| CWE | CWE-807 |
| Vendor | canon inc. |
| Product | imagepress series |
| Published | Apr 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for canon inc. imagepress series
Be the first to know when new medium vulnerabilities affecting canon inc. imagepress series are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Canon Inc. / imagePRESS Series
all version
Canon Inc. / imageFORCE Series
all version
Canon Inc. / imageRUNNER ADVANCE Series
all version
Canon Inc. / imageRUNNER Series
all version
Canon Inc. / Satera MF7525F
v15.00 or earlier
Canon Inc. / Satera MF7625F
v8.12 or earlier
Canon Inc. / Satera MF7725F
v16.04 or earlier
Canon Inc. / Satera MF842CDW
v16.04 or earlier
Canon Inc. / imageCLASS X C1538iF II
v16.04 or earlier
Canon Inc. / imageCLASS X MF1538C II
v16.04 or earlier
Canon Inc. / i-SENSYS C1533iF II
v16.04 or earlier
Canon Inc. / i-SENSYS X C1538 iF II
v16.04 or earlier
Canon Inc. / i-SENSYS MF842Cdw
v16.04 or earlier
Canon Inc. / MF842CDW
v16.04 or earlier
Canon Inc. / MF842CX
v16.04 or earlier
References
psirt.canon: https://psirt.canon/advisory-information/cp2026-003/ canon.jp: https://canon.jp/support/support-info/260423vulnerability-response usa.canon.com: https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers canon-europe.com: https://www.canon-europe.com/support/product-security/