# Canon vulnerabilities Source: https://junglewise.ai/threats/vendors/canon Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/canon.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Canon: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95649, was published on 4 November 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 3 - All time: 11 (0 critical, 0 exploited in the wild) ## About Canon Canon is a multinational corporation specializing in optical, imaging, and industrial products such as cameras, printers, and medical equipment. ## Latest Canon vulnerabilities - [CVE-2026-95649: Canon IRISPowerscan script execution vulnerability](https://junglewise.ai/threats/cve-2026-95649-irispowerscan-insufficiently-restrict-the-use-of-untrusted) (info, published 4 Nov 2026) - [CVE-2026-94460: Canon IRISPowerscan insecure default configuration](https://junglewise.ai/threats/cve-2026-94460-irispowerscan-contain-an-insecure-default-configuration-where-the) (info, published 4 Nov 2026) - [CVE-2026-94459: Canon IRISPowerscan default credentials](https://junglewise.ai/threats/cve-2026-94459-irispowerscan-contain-default-user-accounts-with-predictable) (info, published 4 Nov 2026) - [CVE-2026-3245: Canon PRISMAproduction deserialization remote code execution](https://junglewise.ai/threats/cve-2026-3245-canon-prismaproduction-deserialization-remote-code-execution) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-9262: Canon EOS Network Setting Tool insecure default FTP configuration](https://junglewise.ai/threats/cve-2026-9262-canon-eos-network-setting-tool-insecure-default-ftp-configuration) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-9261: Canon EOS Network Setting Tool weak SSH cryptographic algorithms](https://junglewise.ai/threats/cve-2026-9261-canon-eos-network-setting-tool-weak-ssh-cryptographic-algorithms) (medium, CVSS 6.8, published 16 Jun 2026) - [CVE-2026-9260: Canon EOS Network Setting Tool hard-coded cryptographic keys](https://junglewise.ai/threats/cve-2026-9260-canon-eos-network-setting-tool-hard-coded-cryptographic-keys) (medium, CVSS 6.2, published 16 Jun 2026) - [CVE-2026-9259: Canon EOS Network Setting Tool improper certificate validation](https://junglewise.ai/threats/cve-2026-9259-canon-eos-network-setting-tool-improper-certificate-validation) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-9258: Canon EOS Network Setting Tool improper SSH host key validation](https://junglewise.ai/threats/cve-2026-9258-canon-eos-network-setting-tool-improper-ssh-host-key-validation) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-6892: Canon CUPS Printer Driver symbolic link vulnerability in macOS installer](https://junglewise.ai/threats/cve-2026-6892-canon-cups-printer-driver-symbolic-link-vulnerability-in-macos) (medium, CVSS 5, published 29 May 2026) - [CVE-2026-6891: Canon My Image Garden for macOS symbolic link vulnerability in installer](https://junglewise.ai/threats/cve-2026-6891-canon-my-image-garden-for-macos-symbolic-link-vulnerability-in) (medium, CVSS 5, published 29 May 2026) ## Most severe Canon vulnerabilities - [CVE-2026-3245: Canon PRISMAproduction deserialization remote code execution](https://junglewise.ai/threats/cve-2026-3245-canon-prismaproduction-deserialization-remote-code-execution) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-9261: Canon EOS Network Setting Tool weak SSH cryptographic algorithms](https://junglewise.ai/threats/cve-2026-9261-canon-eos-network-setting-tool-weak-ssh-cryptographic-algorithms) (medium, CVSS 6.8, published 16 Jun 2026) - [CVE-2026-9262: Canon EOS Network Setting Tool insecure default FTP configuration](https://junglewise.ai/threats/cve-2026-9262-canon-eos-network-setting-tool-insecure-default-ftp-configuration) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-9259: Canon EOS Network Setting Tool improper certificate validation](https://junglewise.ai/threats/cve-2026-9259-canon-eos-network-setting-tool-improper-certificate-validation) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-9258: Canon EOS Network Setting Tool improper SSH host key validation](https://junglewise.ai/threats/cve-2026-9258-canon-eos-network-setting-tool-improper-ssh-host-key-validation) (medium, CVSS 6.5, published 16 Jun 2026) - [CVE-2026-9260: Canon EOS Network Setting Tool hard-coded cryptographic keys](https://junglewise.ai/threats/cve-2026-9260-canon-eos-network-setting-tool-hard-coded-cryptographic-keys) (medium, CVSS 6.2, published 16 Jun 2026) - [CVE-2026-6892: Canon CUPS Printer Driver symbolic link vulnerability in macOS installer](https://junglewise.ai/threats/cve-2026-6892-canon-cups-printer-driver-symbolic-link-vulnerability-in-macos) (medium, CVSS 5, published 29 May 2026) - [CVE-2026-6891: Canon My Image Garden for macOS symbolic link vulnerability in installer](https://junglewise.ai/threats/cve-2026-6891-canon-my-image-garden-for-macos-symbolic-link-vulnerability-in) (medium, CVSS 5, published 29 May 2026) - [CVE-2026-95649: Canon IRISPowerscan script execution vulnerability](https://junglewise.ai/threats/cve-2026-95649-irispowerscan-insufficiently-restrict-the-use-of-untrusted) (info, published 4 Nov 2026) - [CVE-2026-94460: Canon IRISPowerscan insecure default configuration](https://junglewise.ai/threats/cve-2026-94460-irispowerscan-contain-an-insecure-default-configuration-where-the) (info, published 4 Nov 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Canon technologies - [Canon EOS Network Setting Tool](https://junglewise.ai/threats/technologies/eos-network-setting-tool): 5 vulnerabilities - [Canon EOS Utility](https://junglewise.ai/threats/technologies/eos-utility): 4 vulnerabilities - [Canon IRISPowerscan](https://junglewise.ai/threats/technologies/irispowerscan): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Canon vulnerabilities", https://junglewise.ai/threats/vendors/canon, 12 November 2026.