ZDI-26-065 HIGH 8.8 Published Feb 05, 2026

Lexmark CX532adwe usecmap Type Confusion Remote Code Execution Vulnerability

Lexmark

A critical unauthenticated remote code execution vulnerability (CVE-2025-65080) has been discovered in Lexmark CX532adwe multifunction printers, allowing attackers on the network to execute arbitrary code without needing credentials. The high CVSS score of 8.8 reflects the severity of the threat, as attackers can gain complete control over affected devices and potentially use them as entry points into organizational networks. Organizations should immediately patch affected printers, restrict network access to these devices, and monitor for suspicious activity, as exploitation requires only network proximity and no authentication.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy