CVE-2026-4682

N/A

Description

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.

CVE Details

CVSS v3.1 ScoreN/A

Published4/15/2026

Last Modified4/15/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-121

References

https://support.hp.com/us-en/document/ish_14744451-14744475-16(hp-security-alert@hp.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.