{"id":"CVE-2026-94459","state":"PUBLISHED","title":"IRISPowerscan Default accounts with predictable credentials","description":"IRISPowerscan contain\ndefault user accounts with predictable credentials. An unauthenticated attacker\nwith access to an affected installation could use these credentials to\nauthenticate to the application and access functionality available to the\naffected accounts, potentially resulting in unauthorised access or modification\nof application data and configuration.","publishedAt":"2026-11-04T09:11:26.699Z","updatedAt":"2026-11-04T09:11:26.699Z","severity":{"score":7.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","source":"Canon_EMEA"},"assigner":"Canon_EMEA","products":["I.R.I.S S.A. IRISPowerscan"],"affected":[{"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.3","versionType":"custom"}],"platforms":["Windows"]}],"references":["https://www.canon-europe.com/psirt/advisory-information"],"weaknesses":["CWE-1392"],"ingestedAt":"2026-11-04T09:18:06.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/94xxx/CVE-2026-94459.json","commit":"8c5c8784c4dcac8f74c3312160cebad85d285b85","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-94459","state":"PUBLISHED","datePublished":"2026-11-04T09:11:26.699Z","dateUpdated":"2026-11-04T09:11:26.699Z","assignerShortName":"Canon_EMEA","assignerOrgId":"4586e0a2-224d-4f8a-9cb4-8882b208c0b3","dateReserved":"2026-09-21T17:17:19.496Z"},"containers":{"cna":{"title":"IRISPowerscan Default accounts with predictable credentials","descriptions":[{"lang":"en","value":"IRISPowerscan contain\ndefault user accounts with predictable credentials. An unauthenticated attacker\nwith access to an affected installation could use these credentials to\nauthenticate to the application and access functionality available to the\naffected accounts, potentially resulting in unauthorised access or modification\nof application data and configuration."}],"affected":[{"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.3","versionType":"custom"}],"platforms":["Windows"]}],"references":[{"url":"https://www.canon-europe.com/psirt/advisory-information","tags":["vendor-advisory","mitigation","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":7.2,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1392","lang":"en","description":"CWE-1392 Use of default credentials","type":"CWE"}]}],"providerMetadata":{"shortName":"Canon_EMEA","orgId":"4586e0a2-224d-4f8a-9cb4-8882b208c0b3","dateUpdated":"2026-11-04T09:11:26.699Z"},"impacts":[{"descriptions":[{"lang":"en","value":"Not applicable"}]}],"tags":["x_cemea","x_iris","x_ips","x_subsidiary"],"credits":[{"lang":"en","value":"Paul van der Haas working with Orange Cyberdefense","type":"finder"}],"source":{"advisory":"CPE2026-057","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.5"}}}}}