Critical severity · published Feb 14, 2025
CVE-2025-26507
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F3
Futuresmart 3 · HP
before 2309118_002276; before 2309118_002274; before 2309118_002275 · source: NVD
F4
Futuresmart 4 · HP
before 2411278_068111; before 2411278_068112; before 2411278_068114; before 2411278_068113 · source: NVD
F5
Futuresmart 5 · HP
before 2508402_000067; before 2508402_000106; before 2508402_000106; before 2508402_000090; before 2508125_000009; before 2508402_000058; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-26507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-26507
Vendor Advisory
https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007
More from Futuresmart 3
9.8
CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVE-2021-39238
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow
9.8
CVE-2019-6334
HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code
6.5
CVE-2024-0407
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled…
6.1
CVE-2019-18914
A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on…