Read the docs
TI-2026-01654 Aliases CVE-2026-1997GHSA-993x-2cg3-pv23

Certain HP OfficeJet Pro Printers - Information Disclosure

Priority LOW 36CWE-346Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-346.

Summary

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0022 12th percentileScored 2026-11-07
Fix Fixed HP OfficeJet Pro 8730 All-in-One Printer (HP Inc): <001.2602BHP OfficeJet Pro 8740 All-in-One Printer series (HP Inc): <001.2602B+6 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseHP OfficeJet Pro 8730 All-in-One Printerbefore <001.2602B<001.2602BPatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 8740 All-in-One Printer seriesbefore <001.2602B<001.2602BPatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 8730 Mono Printer seriesbefore <001.2602B<001.2602BPatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 8210 Printer seriesbefore <001.2602B<001.2602BPatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 7740 Wide Format All-in-One Printer seriesbefore <002.2602A<002.2602APatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 7730 Wide Format All-in-One Printerbefore <002.2602A<002.2602APatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 7720 Wide Format All-in-One Printer seriesbefore <002.2602A<002.2602APatch availableCNA
Hewlett Packard EnterpriseHP OfficeJet Pro 8710 All-in-One Printer seriesbefore <001.2602A<001.2602APatch availableCNA
  • HP OfficeJet Pro 8730 All-in-One Printer VendorHewlett Packard Enterprise Affected before <001.2602B Fixed in <001.2602B Patch available CNA
  • HP OfficeJet Pro 8740 All-in-One Printer series VendorHewlett Packard Enterprise Affected before <001.2602B Fixed in <001.2602B Patch available CNA
  • HP OfficeJet Pro 8730 Mono Printer series VendorHewlett Packard Enterprise Affected before <001.2602B Fixed in <001.2602B Patch available CNA
  • HP OfficeJet Pro 8210 Printer series VendorHewlett Packard Enterprise Affected before <001.2602B Fixed in <001.2602B Patch available CNA
  • HP OfficeJet Pro 7740 Wide Format All-in-One Printer series VendorHewlett Packard Enterprise Affected before <002.2602A Fixed in <002.2602A Patch available CNA
  • HP OfficeJet Pro 7730 Wide Format All-in-One Printer VendorHewlett Packard Enterprise Affected before <002.2602A Fixed in <002.2602A Patch available CNA
  • HP OfficeJet Pro 7720 Wide Format All-in-One Printer series VendorHewlett Packard Enterprise Affected before <002.2602A Fixed in <002.2602A Patch available CNA
  • HP OfficeJet Pro 8710 All-in-One Printer series VendorHewlett Packard Enterprise Affected before <001.2602A Fixed in <001.2602A Patch available CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:o:hp:m9l65a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:m9l65a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l20a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s32a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s32a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s42a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s42a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:t0g65a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g65a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s39a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s39a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x83a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x83a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s43a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s43a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s40a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s40a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s41a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s41a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g56a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g56a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p65a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p66a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p66a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p67a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p67a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*before 001.2602bVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:g5j38a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:g5j38a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t1p99a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t1p99a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:l3t99a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:l3t99a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:y0s19a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:y0s19a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:g5j56a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:g5j56a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:y0s18a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:y0s18a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l18a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l18a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:m9l66a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:m9l66a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:m9l67a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:m9l67a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g46a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g46a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x76a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x76a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x78a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x78a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x80a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x80a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s37a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s37a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:m9l70a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:m9l70a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x77a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x77a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x81a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x81a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6x79a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6x79a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k7s38a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k7s38a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g47a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g47a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g48a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g48a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g49a_firmware:*:*:*:*:*:*:*:*before 001.2602aVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g49a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

  • Fix · CNA HP OfficeJet Pro 8730 All-in-One Printer (HP Inc) Fixed in <001.2602B
  • Fix · CNA HP OfficeJet Pro 8740 All-in-One Printer series (HP Inc) Fixed in <001.2602B
  • Fix · CNA HP OfficeJet Pro 8730 Mono Printer series (HP Inc) Fixed in <001.2602B
  • Fix · CNA HP OfficeJet Pro 8210 Printer series (HP Inc) Fixed in <001.2602B
  • Fix · CNA HP OfficeJet Pro 7740 Wide Format All-in-One Printer series (HP Inc) Fixed in <002.2602A
  • Fix · CNA HP OfficeJet Pro 7730 Wide Format All-in-One Printer (HP Inc) Fixed in <002.2602A
  • Fix · CNA HP OfficeJet Pro 7720 Wide Format All-in-One Printer series (HP Inc) Fixed in <002.2602A
  • Fix · CNA HP OfficeJet Pro 8710 All-in-One Printer series (HP Inc) Fixed in <001.2602A

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    HP OfficeJet Pro 8710 All-in-One Printer series <001.2602A

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-01653 Certain HP OfficeJet Pro Printers – Denial of ServicePriority LOW 36
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1997
  2. 2026-10-03 Alias added: GHSA-993x-2cg3-pv23

References

Advisory 1

  • TI-2018-04318 Out-of-bounds write in Hewlett Packard Enterprise HP inkjet printers CVSS 3.0CRITICAL 9.8
  • TI-2018-04319 Memory corruption in Hewlett Packard Enterprise HP inkjet printers CVSS 3.0HIGH 7.8
  • TI-2022-11363 Certain HP Print Products are potentially vulnerable to Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2026-01653 Certain HP OfficeJet Pro Printers – Denial of Service CVSS 4.0MEDIUM 6.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences