CVE-2026-1789
Medium
Description
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
SeverityMedium
CVSS4.9
Exploit probability—
ProductimagePRESS Series
PublishedApr 24, 2026
First seenApr 24, 2026
Weakness typeCWE-807CWE-807
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canon Inc. imagePRESS Series | all version | — |
| Canon Inc. imageFORCE Series | all version | — |
| Canon Inc. imageRUNNER ADVANCE Series | all version | — |
| Canon Inc. imageRUNNER Series | all version | — |
| Canon Inc. Satera MF7525F | v15.00 or earlier | — |
| Canon Inc. Satera MF7625F | v8.12 or earlier | — |
| Canon Inc. Satera MF7725F | v16.04 or earlier | — |
| Canon Inc. Satera MF842CDW | v16.04 or earlier | — |
| Canon Inc. imageCLASS X C1538iF II | v16.04 or earlier | — |
| Canon Inc. imageCLASS X MF1538C II | v16.04 or earlier | — |
| Canon Inc. i-SENSYS C1533iF II | v16.04 or earlier | — |
| Canon Inc. i-SENSYS X C1538 iF II | v16.04 or earlier | — |
| Canon Inc. i-SENSYS MF842Cdw | v16.04 or earlier | — |
| Canon Inc. MF842CDW | v16.04 or earlier | — |
| Canon Inc. MF842CX | v16.04 or earlier | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.