{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"IRISPowerscan","source":"CNA: Canon_EMEA","vendor":"I.R.I.S S.A.","versions":[{"lessThanOrEqual":"12.3","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-94459","cwes":["CWE-1392"],"description":"IRISPowerscan contain\ndefault user accounts with predictable credentials. An unauthenticated attacker\nwith access to an affected installation could use these credentials to\nauthenticate to the application and access functionality available to the\naffected accounts, potentially resulting in unauthorised access or modification\nof application data and configuration.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"CNA: Canon_EMEA","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.2,"severity":"high","source":"NVD: 4586e0a2-224d-4f8a-9cb4-8882b208c0b3","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"}],"modifiedAt":1793787446833,"publishedAt":1793783486699,"references":[{"source":"CNA: Canon_EMEA","tags":["vendor-advisory","mitigation","patch"],"url":"https://www.canon-europe.com/psirt/advisory-information"},{"source":"4586e0a2-224d-4f8a-9cb4-8882b208c0b3","tags":[],"url":"https://www.canon-europe.com/psirt/advisory-information"}],"remediation":[{"kind":"fix","source":"CNA: Canon_EMEA","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.canon-europe.com/psirt/advisory-information"}],"revision":"d8bff789af344f741036e8383fb92f0b151abbe10f9bf818b51e3c1b5f61ceee","sources":[{"modifiedAt":1793783486699,"name":"CNA: Canon_EMEA","retrievedAt":1793786938847,"url":"https://www.cve.org/CVERecord?id=CVE-2026-94459"},{"modifiedAt":1793787446833,"name":"NVD","retrievedAt":1793794573015,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94459"}],"ssvc":null,"status":"published","title":"IRISPowerscan Default accounts with predictable credentials","updatedAt":1793794573015}