PT-2026-34794 · Canon · Mf842Cdw+14

Published 2026-04-23 · Updated 2026-04-24 · CVE-2026-1789

NVD

CVSS v3.1

4.9

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.

Fix

Weakness Enumeration

CWE-807

Related Identifiers

CVE-2026-1789

Affected Products

Mf842Cdw

Mf842Cx

Satera Mf7525F

Satera Mf7625F

Satera Mf7725F

Satera Mf842Cdw

I-Sensys C1533If Ii

I-Sensys Mf842Cdw

I-Sensys X C1538 If Ii

Imageclass X C1538If Ii

Imageclass X Mf1538C Ii

Imageforce Series

Imagepress Series

Imagerunner Advance Series

Imagerunner Series

References · 5

• https://psirt.canon/advisory-information/cp2026-003 · Vendor Advisory
• https://canon.jp/support/support-info/260423vulnerability-response · Vendor Advisory
• https://canon-europe.com/support/product-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1789 · Security Note
• https://usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers · Vendor Advisory