1. Home
  2. CVE Database
  3. CVE-2025-26508
CRITICAL · 9.8

CVE-2025-26508

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

Vulnerability Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpFuturesmart 3< 2309118_002276
HpCf235A-
HpCf236A-
HpCf238A-
HpF2A66A-
HpF2A67A*-
HpF2A68A-
HpF2A69A-
HpF2A70A-
HpF2A71A-
HpB5L23A-
HpB5L24A-
HpB5L25A-
HpB5L26A-
HpB5L38A-
HpB5L39A-
HpBl27A-
HpFuturesmart 4< 2411278_068111
HpA2W75A-
HpA2W76A-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2025-26508?

CVE-2025-26508 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print j...

How severe is CVE-2025-26508?

CVE-2025-26508 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-26508?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Futuresmart 3, Hp Cf235A, Hp Cf236A, Hp Cf238A, Hp F2A66A.