Canon Production Printers CVE-2026-1789

Canon has released patches for affected printers and multifunction devices; organizations should immediately apply the latest firmware updates available from Canon's security advisory pages (psirt.canon/advisory-information/cp2026-003/ and usa.canon.com). Interim compensating controls include: (1) Restrict network access to the printer's browser-based management interface using network firewalls or access control lists (ACLs) - permit only known administrator IP addresses or subnets, blocking all other network paths to the management port (typically TCP 80/443); (2) Enforce strong authentication and multi-factor authentication (MFA) for administrative accounts that can access the printer's web interface, reducing the likelihood of compromise; (3) Audit and minimize the number of accounts with high-privilege (administrator) access to printer management interfaces, following least-privilege principles; (4) Monitor and log all access to the management interface, alerting on anomalous requests or bulk information retrieval. Apply patches as soon as tested in non-production environments; interim network isolation should be considered until patches are validated and deployed.