PT-2026-34794 · Canon · Mf842Cdw+14

Published 2026-04-23 · Updated 2026-05-28 · CVE-2026-1789

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Certain production printers and office/small office multifunction printers (affected versions not specified)

Description A flaw in the browser-based remote management interface allows an administrator to access sensitive information on the device by sending crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-807

Related Identifiers

CVE-2026-1789

Affected Products

Mf842Cdw

Mf842Cx

Satera Mf7525F

Satera Mf7625F

Satera Mf7725F

Satera Mf842Cdw

I-Sensys C1533If Ii

I-Sensys Mf842Cdw

I-Sensys X C1538 If Ii

Imageclass X C1538If Ii

Imageclass X Mf1538C Ii

Imageforce Series

Imagepress Series

Imagerunner Advance Series

Imagerunner Series

References · 8

• https://psirt.canon/advisory-information/cp2026-003 · Vendor Advisory
• https://usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers · Vendor Advisory
• https://canon-europe.com/support/product-security · Vendor Advisory
• https://canon.jp/support/support-info/260423vulnerability-response · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1789 · Security Note
• https://twitter.com/CVEnew/status/2048168344046743752 · Twitter Post
• https://twitter.com/DFIR_Radar/status/2060134751785140257 · Twitter Post
• https://twitter.com/praetorianlabs/status/2060133216036471175 · Twitter Post