What’s Vulnerable › Vulnerabilities

CVE-2026-1789

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-10-26
• Weakness: CWE-807

Description

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.

Affected products

• Canon Inc. i-SENSYS C1533iF II: through v16.04
• Canon Inc. i-SENSYS MF842Cdw: through v16.04
• Canon Inc. i-SENSYS X C1538 iF II: through v16.04
• Canon Inc. imageCLASS X C1538iF II: through v16.04
• Canon Inc. imageCLASS X MF1538C II: through v16.04
• Canon Inc. imageFORCE Series: all version
• Canon Inc. imagePRESS Series: all version
• Canon Inc. imageRUNNER ADVANCE Series: all version
• Canon Inc. imageRUNNER Series: all version
• Canon Inc. MF842CDW: through v16.04
• Canon Inc. MF842CX: through v16.04
• Canon Inc. Satera MF7525F: through v15.00
• Canon Inc. Satera MF7625F: through v8.12
• Canon Inc. Satera MF7725F: through v16.04
• Canon Inc. Satera MF842CDW: through v16.04

References

• https://canon.jp/support/support-info/260423vulnerability-response
• https://psirt.canon/advisory-information/cp2026-003/
• https://www.canon-europe.com/support/product-security/
• https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers

Get alerted when CVE-2026-1789 or the next vulnerability affects your stack