EUVD-2026-81091
GHSA-hwpp-3fw9-r2r4
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Vendor-asserted network unauthenticated traversal with file-write integrity and availability impact and no confidentiality (VC:N/C:N); AC:L retained per vendor though 'certain conditions' hedging could justify AC:H.
Primary rating from Vendor (hp).
CVSS VectorVendor: hp
Lifecycle Timeline
2DescriptionCVE.org
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
AnalysisAI
HP Advance server software contains a path traversal vulnerability (CWE-22) in its HP AC Print & Scan and HP Output Central components, allowing unauthenticated remote attackers to write arbitrary files, which can lead to remote code execution or privilege escalation. The vendor CVSS 4.0 vector (8.8) rates it network-reachable and unauthenticated with high integrity and availability impact, but HP notes impact occurs 'under certain conditions,' implying unstated deployment prerequisites that may narrow actual exploitability; no public exploit code or confirmed active exploitation has been identified at time of analysis.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the HP Advance server itself (HP AC Print & Scan or HP Output Central components). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 4.0 score of 8.8 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N) frames this as a network-reachable, unauthenticated path-traversal flaw with high integrity and availability impact but no confidentiality impact - consistent with a file-write/traversal primitive rather than a data-disclosure bug. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the security update referenced in HP security bulletin hpsbpi04149 (https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149); the bulletin should specify the exact patched version, as no fix version is provided in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether HP Advance server software with HP AC Print & Scan or HP Output Central is deployed anywhere in the estate, document the exact build and hosting location, and isolate any confirmed instances behind firewall rules or network segmentation that permit access only from trusted print-management subnets and administrative jump hosts - do not leave these services reachable from general user VLANs or the internet. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Hp Ac Print Scan
View allUnauthenticated remote code injection in HP Advance can let an attacker with network reachability to the print-managemen
Unauthenticated remote code execution and privilege escalation in HP Advance software can lead to full server compromise
Same weakness CWE-22 – Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today