PatchSiren

HP Inc CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH HP Inc CVE published 2026-09-22

CVE-2026-19915

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. This issue affects HP Support Assistant installations, particularly in environments with local access risks. Defenders and administrators should assess exposure and prioriti [truncated]

HIGH HP Inc CVE published 2026-09-16

CVE-2026-89084

CVE-2026-89084 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T20:17:38.833Z and has not been modified since then. This vulnerability involves potential security vulnerabilities in HP Advance software that could lead to elevation of privilege, remote code execution, or arbitrary file write. Defenders should verify software versions, assess exposure, and apply patche [truncated]

CRITICAL HP Inc CVE published 2026-09-16

CVE-2026-89083

CVE-2026-89083 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T20:17:38.703Z and has not been modified since then. The vulnerability affects HP Advance software, potentially allowing elevation of privilege, remote code execution, or arbitrary file write under certain conditions. Defenders should verify software versions, assess exposure, and apply patches or compens [truncated]

CRITICAL HP Inc CVE published 2026-09-16

CVE-2026-89082

CVE-2026-89082 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T20:17:38.573Z and has not been modified since then. The vulnerability affects HP Advance software, potentially allowing elevation of privilege, remote code execution, or arbitrary file write. Defenders should assess exposure and apply vendor-provided remediation. Verification of HP Advance software versi [truncated]

CRITICAL HP Inc. CVE published 2026-09-16

CVE-2026-91106

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:03.587Z and has not been modified since then. This CVE involves multiple externally reported vulnerabilities within HP's Linux Imaging and Printing (HPLIP) software. These vulnerabilities could potentially enable remote code execution, privilege escalation, denial of service, information di [truncated]

HIGH HP Inc. CVE published 2026-09-16

CVE-2026-91105

CVE-2026-91105 is a high-severity vulnerability in HP's Linux Imaging and Printing (HPLIP) software, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. The vulnerability has a CVSS score of 8.6 and is considered high-severity. Defenders should assess exposure and prioritize remediation, especially in environments [truncated]

CRITICAL HP Inc. CVE published 2026-09-16

CVE-2026-91104

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:03.320Z and has not been modified since then. CVE-2026-91104 is a critical vulnerability in HP Linux Imaging and Printing (HPLIP) that could enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. Defenders and admini [truncated]

MEDIUM HP Inc. CVE published 2026-09-16

CVE-2026-91103

CVE-2026-91103 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:03.197Z and has not been modified since then. This vulnerability affects HP Linux Imaging and Printing (HPLIP) systems, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. Defenders [truncated]

HIGH HP Inc. CVE published 2026-09-16

CVE-2026-91102

CVE-2026-91102 is a high-severity vulnerability in HP's Linux Imaging and Printing (HPLIP) software. The vulnerability could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.

MEDIUM HP Inc. CVE published 2026-09-16

CVE-2026-91101

CVE-2026-91101 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:02.947Z and was last modified on 2026-09-21T17:28:23.030Z. The NVD entry is currently Analyzed. The vulnerability affects HP Linux Imaging and Printing (HPLIP), potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modifica [truncated]

MEDIUM HP Inc. CVE published 2026-09-16

CVE-2026-91100

CVE-2026-91100 debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:02.820Z and was last modified on 2026-09-21T17:28:29.430Z. The NVD entry is currently Analyzed. The vulnerability affects HP Linux Imaging And Printing (HPLIP) and could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file m [truncated]

MEDIUM HP Inc. CVE published 2026-09-16

CVE-2026-91099

CVE-2026-91099 is a medium-severity vulnerability in HP's Linux Imaging and Printing (HPLIP) software, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. The vulnerability affects several software components under certain conditions. Defenders should verify HPLIP versions and apply vendor remediation. The CVE reco [truncated]

HIGH HP Inc. CVE published 2026-09-16

CVE-2026-91098

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-16T19:18:02.247Z and has not been modified since then. This CVE affects HPLIP, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. Defenders should verify exposure and assess potential impact, focusing on sys [truncated]

HIGH HP Inc. CVE published 2026-09-16

CVE-2026-91097

CVE-2026-91097 is a HIGH severity vulnerability in HP Linux Imaging and Printing (HPLIP) that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.

HIGH HP Inc CVE published 2026-08-31

CVE-2026-82346

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. This issue affects HP ImageDiags installations and requires review by system administrators and security teams. The vulnerability has a CVSS score of 7 and is classified as HIGH sev [truncated]

HIGH HP Inc CVE published 2026-08-21

CVE-2026-75946

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. This is a preliminary assessment based on limited information. Further verification is required to confirm the vulnerability's existence and impact. The CVE record was publis [truncated]

MEDIUM HP Inc CVE published 2026-08-17

CVE-2026-17639

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests. This vulnerability, tracked as CVE-2026-17639, affects HP Smart Tank All-in-One printers. The denial of service condition could allow an attacker to disrupt the availability o [truncated]

HIGH HP Inc. CVE published 2026-08-17

CVE-2026-12553

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-17T19:16:24.560Z and has not been modified since then. The CVE-2026-12553 vulnerability in HP Web Jetadmin (WJA) may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism. This could potentially lead to sensitive information disclosure or code exec [truncated]

HIGH HP Inc CVE published 2026-07-06

CVE-2026-13753

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs. The CVE record was published on 2026-07-06T19:16:55.963Z and has not been modified since then. Organizations should verify their inventory and apply vendor-provided remediation if available. The NVD entry is currently A [truncated]

HIGH HP Inc. CVE published 2026-06-15

CVE-2026-5064

A potential security vulnerability has been identified in the HP One Agent for certain HP PC products. This vulnerability might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate this potential vulnerability.

CRITICAL HP Inc. CVE published 2026-06-01

CVE-2026-0826

A critical buffer overflow vulnerability in Poly Voice products on the Linux platform, triggered when Interactive Connectivity Establishment (ICE) is enabled by an administrator. The flaw could allow remote code execution. The vulnerability is classified as CWE-121 (Stack-based Buffer Overflow) and carries a CVSS 4.0 score of 9.2 (CRITICAL). The vendor attribution is currently uncertain: while the source [truncated]

HIGH HP Inc CVE published 2026-05-20

CVE-2026-8632

CVE-2026-8632 is a high-severity potential vulnerability in HP Linux Imaging and Printing Software. The vendor-reported weakness maps to CWE-77 (OS command injection) and, according to the NVD record, could enable privilege escalation and/or arbitrary code execution under local, low-privilege conditions.

CRITICAL HP Inc CVE published 2026-05-20

CVE-2026-8631

CVE-2026-8631 is a critical issue in HP Linux Imaging and Printing Software, specifically in the hpcups processing path when handling crafted print data. The NVD description says the flaw may allow privilege escalation and/or arbitrary code execution. NVD rates the issue CVSS v4.0 9.3 with network access, no privileges, and no user interaction required in its vector, making this a high-priority exposure f [truncated]