CVE-2026-9258
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Canon Inc. | EOS Network Setting Tool for macOS | 1.5.0 or earlier | affected |
| Canon Inc. | EOS Network Setting Tool for Windows | 1.5.0 or earlier | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9258
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Canon EOS Network Setting Tool 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canon EOS Network Setting Tool是日本Canon公司的一款嵌入式网络设置工具。 Canon EOS Network Setting Tool 1.5.0之前版本存在加密问题漏洞，该漏洞源于SSH主机密钥验证不当。以下版本受到影响：1.5.0版本及之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Canon Inc. | EOS Network Setting Tool for Windows | 1.5.0 or earlier | - | |
| Canon Inc. | EOS Network Setting Tool for macOS | 1.5.0 or earlier | - |
II. Public POCs for CVE-2026-9258
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9258
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9258 (3)
- 🔗 「EOS Network Setting Tool」に関する脆弱性について｜サポート｜キヤノンvendor-advisory
- 🔗 ERROR: The request could not be satisfiedvendor-advisory
Same Patch Batch · Canon Inc. · 2026-06-15 · 5 CVEs total
| CVE-2026-9261 | 6.8 MEDIUM | Canon EOS Network Setting Tool 加密问题漏洞 |
| CVE-2026-9259 | 6.5 MEDIUM | Canon EOS Network Setting Tool 加密问题漏洞 |
| CVE-2026-9262 | 6.5 MEDIUM | Canon EOS Network Setting Tool 配置错误漏洞 |
| CVE-2026-9260 | 6.2 MEDIUM | Canon EOS Network Setting Tool 加密问题漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-295
- CVE-2026-16822
Vulnerabilities in IBM AIX and PowerVM VIOS - CVE-2026-16835
Power System Improper Certificate Validation - CVE-2026-49283
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows c - CVE-2026-15078
Vulnerabilities in IBM AIX and PowerVM VIOS - CVE-2026-50149
Contour has Improper JWT Verification for Non-SNI Requests o
V. Comments for CVE-2026-9258
No comments yet