EUVD-2026-81090
GHSA-449r-f525-6h4x
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network code injection with scope change to the host justifies AV:N/PR:N/S:C and full C/I/A:H, but vendor's 'under certain conditions' hedge warrants AC:H over AC:L.
Primary rating from Vendor (hp).
CVSS VectorVendor: hp
Lifecycle Timeline
2DescriptionCVE.org
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
AnalysisAI
Unauthenticated remote code injection in HP Advance can let an attacker with network reachability to the print-management server hosting HP AC Print & Scan or HP Output Central achieve elevation of privilege, remote code execution, or arbitrary file write, as described in HP's self-published advisory hpsbpi04149 (CVSS 4.0 base score 9.3 Critical, CWE-94). The vendor scores both the vulnerable component (VC:H/VI:L) and subsequent systems (SC:H/SI:H) as impacted, and our independent assessment retains a high-severity rating (CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) while noting that HP's explicit 'under certain conditions' wording implies a specific feature, endpoint, or deployment mode is a likely precondition despite the AC:L rating. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the HP Advance server hosting HP AC Print & Scan or HP Output Central and, per the CVSS vector, is remote and unauthenticated (AV:N/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a vendor-self-reported (HP) umbrella advisory (hpsbpi04149) whose CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N with subsequent-system SC:H/SI:H) scores 9.3 Critical, describing an unauthenticated remote code-injection (CWE-94) chain leading to elevation of privilege, RCE, or arbitrary file write on the HP Advance server. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | HP directs customers to its security bulletin hpsbpi04149 (https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149) for the fixed build; no exact patched version number is published in the available data, so no vendor-released patch version can be confirmed at time of analysis and administrators should apply the update HP lists as soon as it is published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all servers running HP Advance that host HP AC Print & Scan or HP Output Central, isolate them from untrusted networks, restrict access to only essential management IPs, enable verbose logging, and monitor for exploitation attempts; review HP advisory hpsbpi04149 for any interim workarounds. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Hp Ac Print Scan
View allUnauthenticated remote code execution and privilege escalation in HP Advance software can lead to full server compromise
HP Advance server software contains a path traversal vulnerability (CWE-22) in its HP AC Print & Scan and HP Output Cent
Same weakness CWE-94 – Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today