CVE-2026-9261 — Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

HIGH

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Published Jun 15, 2026

7.6

HIGH

CVSS 4.0

EPSS 0.32%

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
1.5.0 or earlier	affected	-

unaffected

Version	Status	Constraints
1.5.0 or earlier	affected	-

No remediation recorded yet.

0.32% 0.00322

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00322

Jun–Oct 2026

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.32% (0.00322)	23.00th	v5 (v2026.06.15)
Jun 16, 2026	0.16% (0.00164)	5.96th	v5 (v2026.06.15)

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

Link	Providers	Tags
https://canon.jp/support/support-info/260615vulnerability-response		vendor-advisoryVendor Advisory
https://psirt.canon/advisory-information/cp2026-005/		vendor-advisoryVendor Advisory
https://www.canon-europe.com/support/product-security/		vendor-advisoryVendor Advisory
https://www.usa.canon.com/about-us/to-our-customers/cpa2026-005-vulnerability-remediation-for-eos-network-setting-tool		vendor-advisoryVendor Advisory