--- title: "When Encryption Isn’t Really Encryption" url: https://daily.dev/posts/when-encryption-isn-t-really-encryption-acopsjzck source_url: https://securityboulevard.com/2026/05/when-encryption-isnt-really-encryption type: article source: "Security Boulevard" published: 2026-05-29T01:37:22.922Z updated: 2026-05-29T01:53:34.206Z tags: ["security", "iot"] reading_time: 4 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # When Encryption Isn’t Really Encryption **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 4 min read · 0 upvotes · 0 comments ## Summary Praetorian researchers discovered a vulnerability (CVE-2026-1789) in Canon imageRUNNER ADVANCE DX printers affecting over 200 models. The printer's web UI appears to enforce encryption on configuration exports, but the enforcement is purely client-side. By modifying an HTTP POST parameter from 'encrypted' to 'plaintext', an attacker with admin access can retrieve the full configuration file in plaintext, including stored domain credentials. Combined with the prevalence of default admin credentials on these devices, this allowed the researchers to extract domain service account credentials, bypass network segmentation, move laterally, and achieve full domain compromise. Canon has been notified and has published a security advisory. The post also highlights the broader problem of IoT and network devices being managed outside standard security processes, making them persistent weak points even in otherwise hardened environments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI agents found vulns in this Linux and Unix print server](https://daily.dev/posts/ai-agents-found-vulns-in-this-linux-and-unix-print-server-vscyzutvp) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#iot](https://daily.dev/tags/iot) [View this post on daily.dev](https://daily.dev/posts/when-encryption-isn-t-really-encryption-acopsjzck)