CRITICAL · 9.8

CVE-2025-26506

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

Vulnerability Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Hp4Ra85F Firmware< 6.17.5.34-202412122146
Hp4Ra85F-
Hp4Ra85V Firmware< 6.17.5.34-202412122146
Hp4Ra85V-
Hp4Ra86A Firmware< 6.17.5.34-202412122146
Hp4Ra86A-
Hp4Ra86E Firmware< 6.17.5.34-202412122146
Hp4Ra86E-
Hp4Ra86F Firmware< 6.17.5.34-202412122146
Hp4Ra86F-
Hp4Ra87A Firmware< 6.17.5.34-202412122146
Hp4Ra87A-
Hp4Ra87E Firmware< 6.17.5.34-202412122146
Hp4Ra87E-
Hp4Ra87F Firmware< 6.17.5.34-202412122146
Hp4Ra87F-
Hp4Ra88A Firmware< 6.17.5.34-202412122146
Hp4Ra88A-
Hp4Ra88E Firmware< 6.17.5.34-202412122146
Hp4Ra88E-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-26506?

CVE-2025-26506 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

How severe is CVE-2025-26506?

CVE-2025-26506 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-26506?

Check the references section above for vendor advisories and patch information. Affected products include: Hp 4Ra85F Firmware, Hp 4Ra85F, Hp 4Ra85V Firmware, Hp 4Ra85V, Hp 4Ra86A Firmware.