CVE-2026-9262: Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1

Synopsis

This vulnerability is an insecure default configuration in Canon EOS Network Setting Tool version 1.5.0 and earlier, affecting both the Windows and macOS editions. The tool defaults to plain FTP rather than a secure alternative, meaning credentials and file transfers are sent in cleartext over the network; an attacker positioned to intercept traffic can read them without any authentication of their own. Successful exploitation gives an attacker access to whatever credentials and data the tool transmits. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment Canon publishes a fix version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must be positioned on the network path between the tool and the FTP server to intercept the cleartext traffic.

• AuthenticationNot required

  No credentials are needed; passive traffic interception requires no account on the affected system.

• Victim interactionRequired

  A user must actively initiate an FTP session with the tool, making this a social-engineering or opportunistic scenario where the attacker waits for legitimate use.

• Attack complexityDetail

  Exploit conditions are straightforward and reliable once network access is established; no race conditions or special environmental factors are required (AT:N, AC:L).

Blast Radius

• An attacker reads FTP credentials transmitted in cleartext, which can be reused to access the FTP server directly.
• Any files transferred during the intercepted session are readable by the attacker, exposing potentially sensitive camera assets or configuration data.
• Confidentiality of the session is fully compromised (VC:H); there is no integrity or availability impact reported for this vulnerability.