What is CVE-2026-1585?

CVE-2026-1585 is a medium-severity vulnerability in Canon Inc. Ij Scan Utility, classified under Unquoted Search Path or Element. CVSS score: 6.7/10. Published 2026-02-27.

How severe is CVE-2026-1585?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Canon Inc. Ij Scan Utility

CVE-2026-1585

An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service.

EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Canon Inc. Ij Scan Utility — versions 1.1.2

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

f98c90f0-e9bd-4fa7-911b-51993f3571fd (vendor-advisory)
f98c90f0-e9bd-4fa7-911b-51993f3571fd (vendor-advisory)
f98c90f0-e9bd-4fa7-911b-51993f3571fd (vendor-advisory)
f98c90f0-e9bd-4fa7-911b-51993f3571fd (vendor-advisory)

Frequently asked questions

What is CVE-2026-1585?: CVE-2026-1585 is a medium-severity vulnerability in Canon Inc. Ij Scan Utility, classified under Unquoted Search Path or Element. CVSS score: 6.7/10. Published 2026-02-27.
How severe is CVE-2026-1585?: Medium severity. CVSS v3 base score is 6.7 out of 10.