ZDI-26-063
HIGH 8.8
Published
Feb 05, 2026
Lexmark CX532adwe libesffls Directory Traversal Remote Code Execution Vulnerability
Lexmark
A critical vulnerability in Lexmark CX532adwe printers allows unauthenticated attackers on the same network to execute arbitrary code with a CVSS score of 8.8. This means an attacker can gain complete control of the printer without needing credentials, potentially using it as an entry point to access sensitive documents or the broader network. Security teams should immediately patch affected printers, restrict network access to printer management interfaces, and monitor for any suspicious activity on these devices.