Which versions of Canon EOS Network Setting Tool are affected by CVE-2026-9259?

Canon EOS Network Setting Tool versions 1.5.0 and earlier contain improper TLS certificate validation that exposes network configuration and credential data to interception attacks from…

How to fix or mitigate CVE-2026-9259?

Within 24 hours: Inventory all systems running Canon EOS Network Setting Tool version 1.5.0 and earlier, prioritizing production camera management networks. Within 7 days: Isolate affected tool instances to segregated networks using VPN or air-gapped administrative channels; disable the tool from untrusted networks. Within 30 days: Monitor Canon security advisories for patch availability; prepare upgrade procedure to version 1.5.1 or later upon release; evaluate alternative Canon tools or third-party camera management platforms that enforce certificate validation.

Canon EOS Network Setting Tool CVE-2026-9259

Q: What is the CVSS score of CVE-2026-9259?

CVE-2026-9259 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-37019 HIGH

Improper Certificate Validation (CWE-295)

2026-06-16 f98c90f0-e9bd-4fa7-911b-51993f3571fd

GHSA-v5vr-c46f-3vhm

Information Disclosure Eos Network Setting Tool

7.1

CVSS 4.0 · Vendor: f98c90f0-e9bd-4fa7-911b-51993f3571fd

Severity by source

Vendor (f98c90f0-e9bd-4fa7-911b-51993f3571fd) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Network MITM with on-path attacker raises AC:H; victim must launch the tool (UI:R); only confidentiality of TLS traffic is impacted, so I:N and A:N.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

4.0 AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (f98c90f0-e9bd-4fa7-911b-51993f3571fd).

CVSS VectorVendor: f98c90f0-e9bd-4fa7-911b-51993f3571fd

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Jun 16, 2026 - 00:27 vuln.today

DescriptionCVE.org

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

AnalysisAI

Improper TLS certificate validation in Canon EOS Network Setting Tool version 1.5.0 and earlier allows network-positioned attackers to intercept communications between the tool and Canon servers via man-in-the-middle attacks. The flaw enables disclosure of sensitive information transmitted during camera network configuration, though no public exploit identified at time of analysis. CVSS 4.0 score of 7.1 reflects high confidentiality impact but requires user interaction (UI:P) to be successful.

Technical ContextAI

The Canon EOS Network Setting Tool is a desktop utility used to configure network settings (Wi-Fi, FTP, web service registration) for Canon EOS-series digital cameras. CWE-295 (Improper Certificate Validation) indicates the tool fails to properly verify server certificates during TLS handshakes - either by not checking certificate chains against trusted roots, ignoring hostname mismatches, or accepting expired/self-signed certificates. This breaks the trust anchor that TLS provides, meaning attackers who can position themselves between the tool and its remote endpoints (rogue Wi-Fi, ARP spoofing, compromised upstream router) can present forged certificates and observe or modify traffic that was assumed encrypted.

RemediationAI

Patch available per vendor advisory - Canon PSIRT advisory CP2026-005 directs users to upgrade the EOS Network Setting Tool to a release later than 1.5.0; the exact fixed version is not enumerated in the provided data, so consult https://psirt.canon/advisory-information/cp2026-005/ and the regional pages (canon.jp, usa.canon.com, canon-europe.com) for the current download. Until upgraded, only run the tool on trusted, controlled networks - avoid hotel, conference, and public Wi-Fi during camera setup, and prefer a wired or known-clean LAN. Tunneling the tool's traffic through a trusted VPN narrows the MITM surface to the VPN exit, at the cost of some setup overhead; pinning DNS to a trusted resolver also reduces redirection risk but does not substitute for the patch.