---
id: CVE-2026-94459
title: IRISPowerscan Default accounts with predictable credentials
summary: >-
  IRISPowerscan contain

  default user accounts with predictable credentials. An unauthenticated
  attacker

  with access to an affected installation could use these credentials to

  authenticate to the application and access functionality availab…
severity: high
cvss: 7.2
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-1392
vendor: I.R.I.S S.A.
product: IRISPowerscan
affected:
  - IRISPowerscan <= 12.3
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T09:11:26.699Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-94459'
references:
  - url: 'https://www.canon-europe.com/psirt/advisory-information'
tags:
  - cve.org
epss: 0.00236
epssPercentile: 0.14719
ingestedAt: '2026-11-05T20:33:06.724Z'
---

## Overview

IRISPowerscan contain
default user accounts with predictable credentials. An unauthenticated attacker
with access to an affected installation could use these credentials to
authenticate to the application and access functionality available to the
affected accounts, potentially resulting in unauthorised access or modification
of application data and configuration.

## Affected

- `IRISPowerscan <= 12.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.