Medium severity · published Aug 3, 2026
CVE-2026-18243
HP DesignJet T3500 - Potential Cross-Site Scripting (XSS)
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HD
HP DesignJet T3500 · HP Inc
before AENEAS_04_09_09.1 · source: vendor