Critical severity · published Feb 14, 2025
CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…
9.8
CVSS
1%
EPSS
No
On KEV
Description
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
4F
499m7a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499m8a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499m9a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499n0a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499n1a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499n4a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499n5a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499n6a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q3a Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q3e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q3f Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
4F
499q4e Firmware · HP
before 6.17.5.34-202412122146 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-26508
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-26508
Vendor Advisory
https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007
More from 499m7a Firmware
9.8
CVE-2025-26506
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing…