21
CVEs
4
Critical
10
High
0
KEV
0
PoC
3
Unpatched C/H
81.0%
Patch Rate
0.4%
Avg EPSS
Severity Breakdown
CRITICAL
4
HIGH
10
MEDIUM
7
LOW
0
Monthly CVE Trend
Affected Products (30)
Hp Linux Imaging And Printing Software Hplip
10
Hp Ac Print Scan
3
Hp Output Central
3
Omen Gaming Hub
2
Hp One Agent Software
2
Hp Support Assistant
1
Hp Smart Tank 584 All In One Printer
1
Ccx
1
Hp Smart Tank 5109 All In One Printer
1
Hp Smart Tank 5103 All In One Printer
1
Hp Designjet T3500
1
Hp Deskjet Ink Advantage 4200 All In One Printer Series
1
Hp Smart Tank 591 All In One Printer
1
Hp Smart Tank 598 All In One Printer
1
Hp Smart Tank 5001 All In One Printer
1
Hp Smart Tank 5105 All In One Printer
1
Hp Smart Tank 520 All In One Printer
1
Hp Wolf Pro Security Edition
1
Hp Smart Tank 218 Printer
1
Hp Smart Tank 583 All In One Printer
1
Hp Smart Tank 5107 All In One Printer
1
Hp Smart Tank 5104 All In One Printer
1
Hp Smart Tank 588 All In One Printer
1
Hp Smart Tank 595 All In One Printer
1
Hp Deskjet Ink Advantage 2800 All In One Printer Series
1
Hp Smart Tank 589 All In One Printer
1
Hp Fan Control App
1
Hp Smart Tank 581 All In One Printer
1
Hp 2800 Printer Series
1
Trio C60
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-91104 | Heap-based buffer overflow and related memory-safety flaws in HP Linux Imaging and Printing (HPLIP) can allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification on Linux hosts where HPLIP is installed and the affected component is active. This is an aggregate HP bulletin (hpsbpi04151) that bundles multiple externally reported issues under one CVE, so the published CVSS 4.0 score of 9.3 (AV:N/AC:L/PR:N/UI:N/VC:H/VI:H/VA:H) represents the worst-case component rather than any single flaw, and the assessed CVSS 3.1 score is lower (AV:N/AC:H) because several sub-issues are more likely local than remote and heap exploitation requires reliable memory grooming. No public exploit code or confirmed active exploitation was identified at time of analysis, and the exposure is limited to Linux systems on which HPLIP is deployed rather than being a universal service. | CRITICAL | 9.3 | 0.7% | 47 |
|
| CVE-2026-91106 | Heap-based buffer overflow (CWE-122) in HP's HPLIP - the HP Linux Imaging and Printing Software stack shipped as the default printer/scanner driver on most Linux distributions - can be triggered when attacker-influenced data is processed by a vulnerable component, potentially leading to remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. This is a bundled advisory covering multiple externally reported flaws across several HPLIP components, so the precise prerequisites vary per sub-vulnerability; the vendor assigns CVSS 4.0 score 9.3 (Critical) with a remote, unauthenticated, low-complexity vector, while the independent assessment is more conservative at CVSS 3.1 AV:N/AC:H/PR:N/UI:N, reflecting that the system must be running HPLIP and actually process malicious input. No public exploit code and no confirmed active exploitation were identified at time of analysis. | CRITICAL | 9.3 | 0.7% | 47 |
|
| CVE-2026-89083 | Unauthenticated remote code injection in HP Advance can let an attacker with network reachability to the print-management server hosting HP AC Print & Scan or HP Output Central achieve elevation of privilege, remote code execution, or arbitrary file write, as described in HP's self-published advisory hpsbpi04149 (CVSS 4.0 base score 9.3 Critical, CWE-94). The vendor scores both the vulnerable component (VC:H/VI:L) and subsequent systems (SC:H/SI:H) as impacted, and our independent assessment retains a high-severity rating (CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) while noting that HP's explicit 'under certain conditions' wording implies a specific feature, endpoint, or deployment mode is a likely precondition despite the AC:L rating. Exploitation requires no authentication and no user interaction per the CVSS vector, but there is no CISA KEV entry, no public exploit code identified at time of analysis, and no affected version range published by the vendor. | CRITICAL | 9.3 | 0.5% | 46 |
No patch
|
| CVE-2026-89082 | Unauthenticated remote code execution and privilege escalation in HP Advance software can lead to full server compromise, but exploitation requires specific, undisclosed configuration or deployment conditions according to HP's advisory. The flaw affects the HP AC Print & Scan and HP Output Central components hosted on the HP Advance server. No public exploit code has been identified at time of analysis, though the vendor's CVSS 4.0 vector rates it 9.3 critical while an independent assessment adjusts attack complexity to High due to the gating conditions. | CRITICAL | 9.3 | 0.5% | 46 |
No patch
|
| CVE-2026-12553 | Arbitrary file read and write in HP Web Jetadmin (WJA) is achievable by unauthenticated remote actors via a DLL hijacking mechanism, carrying a CVSS 4.0 score of 8.9. The flaw exposes full confidentiality, integrity, and availability of the WJA host - an attacker can exfiltrate sensitive configuration and credential files or overwrite system files to achieve persistent access. Proof-of-concept exploit code exists (CVSS 4.0 E:P), elevating real-world risk, though active exploitation has not been confirmed by CISA KEV at time of analysis. | HIGH | 8.9 | 0.3% | 45 |
|
| CVE-2026-89084 | HP Advance server software contains a path traversal vulnerability (CWE-22) in its HP AC Print & Scan and HP Output Central components, allowing unauthenticated remote attackers to write arbitrary files, which can lead to remote code execution or privilege escalation. The vendor CVSS 4.0 vector (8.8) rates it network-reachable and unauthenticated with high integrity and availability impact, but HP notes impact occurs 'under certain conditions,' implying unstated deployment prerequisites that may narrow actual exploitability; no public exploit code or confirmed active exploitation has been identified at time of analysis. | HIGH | 8.8 | 0.6% | 44 |
No patch
|
| CVE-2026-91105 | HPLIP (HP Linux Imaging and Printing Software) is affected by multiple heap-based buffer overflow vulnerabilities (CWE-122) that can lead to remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. Exploitation requires user interaction, such as a victim performing a print or scan operation or processing attacker-supplied imaging data, but no authentication is needed, and the attack is network-reachable. HP has remediated the issues; no public exploit code has been identified at the time of analysis. | HIGH | 8.6 | 0.7% | 44 |
|
| CVE-2026-91098 | Heap-based buffer overflows and related memory-safety flaws in HPLIP (HP Linux Imaging and Printing Software) let remote attackers corrupt memory in the print, scan, and device-discovery stack, potentially yielding remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. Only Linux hosts with HPLIP installed and actively processing attacker-influenced input - a crafted print job, a rogue printer/scanner response, or a file handled by the HPLIP stack - are affected, and exploitation is gated on active user interaction (initiating or accepting the malicious print/scan operation) rather than being a fully autonomous remote exploit. The flaws are unauthenticated per the vendor CVSS vector (PR:N), impact varies depending on which bundled sub-vulnerability is triggered, and no public exploit identified at time of analysis. | HIGH | 8.6 | 0.7% | 44 |
|
| CVE-2026-91093 | Privilege escalation and possible arbitrary code execution in HP One Agent on certain HP PC products stem from an uncontrolled search path element (CWE-427), which lets a file planted in a location the agent searches be loaded in place of a legitimate component. The flaw is local, not remote: an attacker must already hold a low-privileged account on an HP PC where HP One Agent is installed, after which no user interaction is required and confidentiality, integrity and availability impacts are all rated high (CVSS 4.0 base 8.5; vendor-assessed CVSS 3.1 7.8). No public exploit code and no confirmed active exploitation were identified at time of analysis, and the priority label places it in this week's remediation queue rather than an emergency; HP has published advisory HPSBHF04150 covering software updates. | HIGH | 8.5 | 0.2% | 42 |
|
| CVE-2026-91102 | Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitrary operating-system commands with the privileges of the affected HPLIP component, resulting in high confidentiality, integrity, and availability impact (vendor CVSS 4.0 base 8.4) and spanning remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification. Exploitation is not remote: it requires local access to a Linux host that has HPLIP installed and in use, and it requires active user interaction, typically by inducing a legitimate user to feed attacker-controlled input into a vulnerable HPLIP component that builds an OS command (CWE-78). No authentication or elevated privileges are needed (PR:N), and no public exploit code or confirmed active exploitation was identified at time of analysis; HP has released remediation for the affected components in advisory HPSBPI04151. | HIGH | 8.4 | 0.2% | 42 |
|
| CVE-2026-75946 | Privilege escalation in HP OMEN Gaming Hub prior to version 1101.2608.0.0 allows local attackers holding standard user credentials to gain elevated system access by exploiting improper JWT signature verification (CWE-347). The gaming hub service, which operates with elevated OS privileges to manage hardware performance settings on HP OMEN systems, fails to validate cryptographic signatures on JWT tokens used for internal access control, enabling privilege claim forgery. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog. | HIGH | 8.2 | 0.1% | 41 |
|
| CVE-2026-15431 | Local privilege escalation in HP Support Assistant (versions prior to 9.53.2.0) allows a low-privileged local user to gain elevated system privileges by exploiting insufficient granularity in access controls (CWE-1220). The vulnerability requires local authenticated access but no user interaction, and the CVSS 4.0 AT:P metric indicates specific attack conditions must be present. No public exploit code or active exploitation has been identified at time of analysis; HP has released a patched version addressing the issue. | HIGH | 7.3 | 0.1% | 37 |
|
| CVE-2026-91097 | Out-of-bounds write flaws in HPLIP (HP Linux Imaging and Printing Software) can corrupt memory when a user processes attacker-influenced input such as a crafted print job, a malicious device or network response, or a handled file, with the affected product confirmed by HP and documented in advisory HPSBPI04151. No authentication is required to reach the vulnerable components, but exploitation depends on mandatory user interaction and on hosts that actually have HPLIP installed and in active printing or scanning use. Worst-case impact spans remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification; no public exploit code or confirmed active exploitation was identified at time of analysis. | HIGH | 7.0 | 0.7% | 36 |
|
| CVE-2026-82346 | Privilege escalation in HP ImageDiags prior to version 5.0.0.36 enables a local low-privileged attacker - contingent on active interaction by a higher-privileged user - to gain elevated system privileges through insufficient access controls on temporary file resources (CWE-379). All versions of HP ImageDiags before 5.0.0.36 are affected per HP security bulletin HPSBGN04143. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog. | HIGH | 7.0 | 0.1% | 35 |
|
| CVE-2026-17639 | Uncontrolled resource consumption in HP Smart Tank All-in-One printers allows unauthenticated network attackers to render affected devices unavailable by flooding them with concurrent HTTP requests. The vulnerability (CWE-400) is rooted in the printer's embedded HTTP service failing to throttle or bound incoming connection load, causing availability loss without any authentication requirement. No public exploit code or CISA KEV listing has been identified at time of analysis, though the simplicity of the attack vector (parallel HTTP flooding) significantly lowers the skill bar for exploitation. | MEDIUM | 6.9 | 0.3% | 35 |
|