CVE-2026-89083

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.

CVSS

No CVSS.

References

Link	Resource
https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149

Configurations

No configuration.

History

16 Sep 2026, 20:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-16 20:17

Updated : 2026-09-16 20:17

NVD link : CVE-2026-89083

Mitre link : CVE-2026-89083

CVE.ORG link : CVE-2026-89083

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-89083", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "hp-security-alert@hp.com", "affectedData": [{"vendor": "HP Inc", "product": "HP AC Print & Scan", "versions": [{"status": "affected", "version": "0", "lessThan": "<V1R4.0.027", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc", "product": "HP Output Central", "versions": [{"status": "affected", "version": "0", "lessThan": "<V1R4.0.029", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-09-16T20:17:38.703", "references": [{"url": "https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149", "source": "hp-security-alert@hp.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software."}], "lastModified": "2026-09-16T20:17:38.703", "sourceIdentifier": "hp-security-alert@hp.com"}

CVE-2026-89083

JSON object

Attach tags to CVE-2026-89083

Attach tags to `CVE-2026-89083`