CVE-2025-26507: Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of…

PriorityP357critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.86%

54.1th percentile

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

Affected

52 ranges· showing 25

Vendor	Product	Version range	Fixed in
hp	futuresmart_3	< 2309118_002276	2309118_002276
hp	futuresmart_3	< 2309118_002274	2309118_002274
hp	futuresmart_3	< 2309118_002275	2309118_002275
hp	futuresmart_4	< 2411278_068111	2411278_068111
hp	futuresmart_4	< 2411278_068112	2411278_068112
hp	futuresmart_4	< 2411278_068114	2411278_068114
hp	futuresmart_4	< 2411278_068113	2411278_068113
hp	futuresmart_5	< 2508402_000067	2508402_000067
hp	futuresmart_5	< 2508402_000106	2508402_000106
hp	futuresmart_5	< 2508402_000090	2508402_000090
hp	futuresmart_5	< 2508125_000009	2508125_000009
hp	futuresmart_5	< 2508402_000058	2508402_000058
hp	futuresmart_5	< 2508402_000098	2508402_000098
hp	futuresmart_5	< 2508402_000072	2508402_000072
hp	futuresmart_5	< 2508402_000117	2508402_000117
hp	futuresmart_5	< 2508402_000116	2508402_000116
hp	futuresmart_5	< 2508402_000089	2508402_000089
hp	futuresmart_5	< 2508402_000053	2508402_000053
hp	futuresmart_5	< 2508402_000081	2508402_000081
hp	futuresmart_5	< 2508125_000003	2508125_000003
hp	futuresmart_5	< 2508402_000103	2508402_000103
hp	futuresmart_5	< 2508402_000087	2508402_000087
hp	futuresmart_5	< 2508402_000075	2508402_000075
hp	futuresmart_5	< 2508125_000006	2508125_000006
hp	futuresmart_5	< 2508402_000123	2508402_000123

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv4.06.3MEDIUMCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.