{"id":"CVE-2026-94459","title":"IRISPowerscan Default accounts with predictable credentials","summary":"IRISPowerscan contain\ndefault user accounts with predictable credentials. An unauthenticated attacker\nwith access to an affected installation could use these credentials to\nauthenticate to the application and access functionality availab…","severity":"high","cvss":7.2,"cvssVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-1392"],"vendor":"I.R.I.S S.A.","product":"IRISPowerscan","affected":["IRISPowerscan <= 12.3"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T09:11:26.699Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94459","references":[{"url":"https://www.canon-europe.com/psirt/advisory-information"}],"tags":["cve.org"],"epss":0.00236,"epssPercentile":0.14719,"ingestedAt":"2026-11-05T20:33:06.724Z","slug":"CVE-2026-94459","body":"## Overview\n\nIRISPowerscan contain\ndefault user accounts with predictable credentials. An unauthenticated attacker\nwith access to an affected installation could use these credentials to\nauthenticate to the application and access functionality available to the\naffected accounts, potentially resulting in unauthorised access or modification\nof application data and configuration.\n\n## Affected\n\n- `IRISPowerscan <= 12.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}