PT-2026-44709 · Canon · Pixma Mg2500 Series Cups Printer Driver+2

Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-6892

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Canon PIXUS iX6800 Series CUPS Printer Driver for macOS versions prior to 16.91.0.0 Canon PIXMA MG2500 Series CUPS Printer Driver for macOS versions prior to 16.91.0.0 Canon PIXMA iX6800 Series CUPS Printer Driver for macOS versions prior to 16.91.0.0

Description Improper handling of symbolic links in the installer may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation. This can lead to the modification of directory permissions for which the attacker would not normally have authorization.

Recommendations Update to a version later than 16.91.0.0.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-6892

Affected Products

Pixma Mg2500 Series Cups Printer Driver

Pixma Ix6800 Series Cups Printer Driver

Pixus Ix6800 Series Cups Printer Driver

References · 6

• https://psirt.canon/advisory-information/cp2026-004 · Vendor Advisory
• https://canon-europe.com/support/product-security · Vendor Advisory
• https://canon.jp/support/support-info/260528-1vulnerability-response · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6892 · Security Note
• https://usa.canon.com/support/canon-product-advisories/CPA2026-004-Vulnerability-Remediation-for-My-Image-Garden-for-macOS-and-CUPS-Printer-Driver-for-macOS · Vendor Advisory
• https://t.me/cveNotify/165121 · Telegram Post