ZDI-26-066
HIGH 8.8
Published
Feb 05, 2026
Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability
Lexmark
A critical remote code execution vulnerability affects Lexmark CX532adwe printers, allowing network-adjacent attackers to execute arbitrary code without requiring authentication. This high-severity flaw (CVSS 8.8) gives attackers the ability to completely compromise affected devices and potentially use them as entry points into corporate networks. Security teams should immediately inventory these printers, restrict network access to them, and apply any available patches from Lexmark while monitoring for suspicious activity on affected devices.