default user accounts with predictable credentials. An unauthenticated attacker
with access to an affected installation could use these credentials to
authenticate to the application and access functionality available to the
affected accounts, potentially resulting in unauthorised access or modification
of application data and configuration.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| I.R.I.S S.A. | IRISPowerscan | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.canon-europe.com/psirt/advisory-information |
|
Wed, 04 Nov 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in unauthorised access or modification of application data and configuration. | |
| Title | IRISPowerscan Default accounts with predictable credentials | |
| Weaknesses | CWE-1392 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Canon_EMEA
Published:
Updated: 2026-11-04T09:11:26.699Z
Reserved: 2026-09-21T17:17:19.496Z
Link: CVE-2026-94459
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-04T10:17:26.833
Modified: 2026-11-04T10:17:26.833
Link: CVE-2026-94459
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-04T10:30:10Z