Medium severity · published Apr 23, 2026
CVE-2026-1789
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain…
4.9
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
MF842CDW · Canon Inc.
v16.04 or earlier · source: vendor
MF
MF842CX · Canon Inc.
v16.04 or earlier · source: vendor
SM
Satera MF7525F · Canon Inc.
v15.00 or earlier · source: vendor
SM
Satera MF7625F · Canon Inc.
v8.12 or earlier · source: vendor
SM
Satera MF7725F · Canon Inc.
v16.04 or earlier · source: vendor
SM
Satera MF842CDW · Canon Inc.
v16.04 or earlier · source: vendor
IC
i-SENSYS C1533iF II · Canon Inc.
v16.04 or earlier · source: vendor
IM
i-SENSYS MF842Cdw · Canon Inc.
v16.04 or earlier · source: vendor
IX
i-SENSYS X C1538 iF II · Canon Inc.
v16.04 or earlier · source: vendor
IX
imageCLASS X C1538iF II · Canon Inc.
v16.04 or earlier · source: vendor
IX
imageCLASS X MF1538C II · Canon Inc.
v16.04 or earlier · source: vendor
IS
imageFORCE Series · Canon Inc.
all version · source: vendor