Vulnerability Mitigation/Remediation for Production Printers and Office Multifunction Printers

Thank you for using Canon products.

A vulnerability has been identified in certain production printers and office/small office multifunction printers.

This vulnerability may allow a third party with administrator privileges to access sensitive information within the product by sending specially crafted requests through the browser‑based remote management function.  

CVE-2026-1789

Although no incidents exploiting this vulnerability have been confirmed at this time, we recommend that you apply the countermeasures listed below to ensure greater peace of mind when using your product.  

・Do not connect the product directly to the Internet. Instead, use it within a secure private network constructed with a firewall appliance, wired router, or Wi‑Fi router, and ensure that a private IP address is configured.
・If the product has an initial default password, change it.
・If the product allows separate administrator and general user IDs/passwords to be configured, set them accordingly.
・Set passwords and other authentication values to ones that are difficult to predict.
・If the product provides authentication functions, enable them and manage the users who are permitted to access the product.
・If the product offers multi‑factor authentication, enable this function and manage the users authorized to use the product.
・Ensure adequate physical security for the product, including its installation environment.

In addition to implementing the above measures, some products also provide modified firmware that can be used more safely.

We kindly ask for your continued trust in and use of Canon products with peace of mind.  

Devices requiring countermeasures: Production Printers, Office/Small Office Multifunction Printers

Affected products
・ Some models of the imageRUNNER ADVANCE Series
・ imageRUNNER Series
・ imagePRESS V Series  
・ imagePRESS Series 
・imageForce Series

List of affected models