ZDI-26-066 HIGH 8.8 Published Feb 05, 2026

Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability

Lexmark

A critical remote code execution vulnerability affects Lexmark CX532adwe printers, allowing network-adjacent attackers to execute arbitrary code without requiring authentication. This high-severity flaw (CVSS 8.8) gives attackers the ability to completely compromise affected devices and potentially use them as entry points into corporate networks. Security teams should immediately inventory these printers, restrict network access to them, and apply any available patches from Lexmark while monitoring for suspicious activity on affected devices.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy