Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-4682

Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hp

Description

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HP Inc HP DeskJet 2800e All-in-One Printer series

Default version status: unaffected

  • 0 to < <2612Aaffected

HP Inc HP DeskJet 4200 All-in-One Printer series

Default version status: unaffected

  • 0 to < <2612Aaffected

HP Inc HP DeskJet Ink Advantage 4200 All-in-One Printer series

Default version status: unaffected

  • 0 to < <2612Aaffected

HP Inc HP DeskJet 4200e All-in-One Printer series

Default version status: unaffected

  • 0 to < <2612Aaffected

HP Inc HP DeskJet Ink Advantage Ultra 4900 series

Default version status: unaffected

  • 0 to < <2612Aaffected

HP Inc HP DeskJet Ink Advantage 2800 All-in-One Printer series

Default version status: unaffected

  • 0 to < <2612Aaffected

References