CVE-2026-9258 - Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

HIGH

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Published Jun 15, 2026

7.1

HIGH

CVSS 4.0

EPSS 0.50%

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
1.5.0 or earlier	affected	-

unaffected

Version	Status	Constraints
1.5.0 or earlier	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

Link	Providers	Tags
https://canon.jp/support/support-info/260615vulnerability-response		vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37018		Advisory
https://psirt.canon/advisory-information/cp2026-005/		vendor-advisoryVendor Advisory
https://www.canon-europe.com/support/product-security/		vendor-advisoryVendor Advisory
https://www.usa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tool		vendor-advisoryVendor Advisory