2
CVEs
0
Critical
1
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (30)
Hp Linux Imaging And Printing Software Hplip
10
Hp Ac Print Scan
3
Hp Output Central
3
Omen Gaming Hub
2
Hp One Agent Software
2
Hp Support Assistant
1
Hp Smart Tank 584 All In One Printer
1
Ccx
1
Hp Smart Tank 5109 All In One Printer
1
Hp Smart Tank 5103 All In One Printer
1
Hp Designjet T3500
1
Hp Deskjet Ink Advantage 4200 All In One Printer Series
1
Hp Smart Tank 591 All In One Printer
1
Hp Smart Tank 598 All In One Printer
1
Hp Smart Tank 5001 All In One Printer
1
Hp Smart Tank 5105 All In One Printer
1
Hp Smart Tank 520 All In One Printer
1
Hp Wolf Pro Security Edition
1
Hp Smart Tank 218 Printer
1
Hp Smart Tank 583 All In One Printer
1
Hp Smart Tank 5107 All In One Printer
1
Hp Smart Tank 5104 All In One Printer
1
Hp Smart Tank 588 All In One Printer
1
Hp Smart Tank 595 All In One Printer
1
Hp Deskjet Ink Advantage 2800 All In One Printer Series
1
Hp Smart Tank 589 All In One Printer
1
Hp Fan Control App
1
Hp Smart Tank 581 All In One Printer
1
Hp 2800 Printer Series
1
Trio C60
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-91093 | Privilege escalation and possible arbitrary code execution in HP One Agent on certain HP PC products stem from an uncontrolled search path element (CWE-427), which lets a file planted in a location the agent searches be loaded in place of a legitimate component. The flaw is local, not remote: an attacker must already hold a low-privileged account on an HP PC where HP One Agent is installed, after which no user interaction is required and confidentiality, integrity and availability impacts are all rated high (CVSS 4.0 base 8.5; vendor-assessed CVSS 3.1 7.8). No public exploit code and no confirmed active exploitation were identified at time of analysis, and the priority label places it in this week's remediation queue rather than an emergency; HP has published advisory HPSBHF04150 covering software updates. | HIGH | 8.5 | 0.2% | 42 |
|
| CVE-2026-106177 | A kernel-mode heap buffer overflow (CWE-122) in HP Sure Click and the related HP Wolf Security product family at versions below 4.4.33 allows a local attacker who already holds elevated privileges to corrupt kernel memory and potentially escalate to full system-level code execution. The flaw is reachable only from a local context on a Windows host running the affected endpoint security agent, requires a non-trivial triggering condition such as precise heap state or a memory-corruption race, and exposes no network or remote attack path. HP has released version 4.4.33 as the vendor-released fix, and no public exploit code has been identified at time of analysis. | MEDIUM | 6.4 | 0.1% | 32 |
|