High severity · published Aug 17, 2026
CVE-2026-12553
HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write
8.9
CVSS
0.4%
EPSS
No
On KEV
Description
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WJ
Web Jetadmin · HP Inc.
before <10.6 · source: vendor