CRITICAL · 9.8

CVE-2025-26506

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

Vulnerability Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Hp499Q9E Firmware< 6.17.5.34-202412122146
Hp499Q9E-
Hp499Q9F Firmware< 6.17.5.34-202412122146
Hp499Q9F-
Hp499R0A Firmware< 6.17.5.34-202412122146
Hp499R0A-
Hp499R0E Firmware< 6.17.5.34-202412122146
Hp499R0E-
Hp499R0F Firmware< 6.17.5.34-202412122146
Hp499R0F-
Hp4Ra80A Firmware< 6.17.5.34-202412122146
Hp4Ra80A-
Hp4Ra80E Firmware< 6.17.5.34-202412122146
Hp4Ra80E-
Hp4Ra80F Firmware< 6.17.5.34-202412122146
Hp4Ra80F-
Hp4Ra81A Firmware< 6.17.5.34-202412122146
Hp4Ra81A-
Hp4Ra81E Firmware< 6.17.5.34-202412122146
Hp4Ra81E-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-26506?

CVE-2025-26506 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

How severe is CVE-2025-26506?

CVE-2025-26506 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-26506?

Check the references section above for vendor advisories and patch information. Affected products include: Hp 499Q9E Firmware, Hp 499Q9E, Hp 499Q9F Firmware, Hp 499Q9F, Hp 499R0A Firmware.