Critical severity · published Sep 16, 2026
CVE-2026-89082
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
9.3
CVSS
0.7%
EPSS
No
On KEV
Description
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
HP AC Print & Scan · HP Inc
before <V1R4.0.027 · source: vendor
HO
HP Output Central · HP Inc
before <V1R4.0.029 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-89082
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-89082
support.hp.com
https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149
More from HP AC Print & Scan
9.3
CVE-2026-89083
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
8.8
CVE-2026-89084
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write