CVE-2026-1997

Published: Feb 10, 2026Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: hp-security-alert@hp.com (Secondary)

Description

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

Affected (41)

Products: Hp: M9l65a Firmware, D9l20a Firmware, K7s32a Firmware, D9l21a Firmware, K7s42a Firmware, T0g65a Firmware, K7s39a Firmware, J6x83a Firmware, K7s43a Firmware, K7s40a Firmware, K7s41a Firmware, T0g56a Firmware, D9l63a Firmware, D9l64a Firmware, J3p65a Firmware, J3p66a Firmware, J3p67a Firmware, J3p68a Firmware, T0g70a Firmware, G5j38a Firmware, T1p99a Firmware, L3t99a Firmware, Y0s19a Firmware, G5j56a Firmware, Y0s18a Firmware, D9l18a Firmware, M9l66a Firmware, M9l67a Firmware, T0g46a Firmware, J6x76a Firmware, J6x78a Firmware, J6x80a Firmware, K7s37a Firmware, M9l70a Firmware, J6x77a Firmware, J6x81a Firmware, J6x79a Firmware, K7s38a Firmware, T0g47a Firmware, T0g48a Firmware, T0g49a Firmware

41 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp M9l65a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp M9l65a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D9l20a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp D9l20a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s32a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s32a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D9l21a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp D9l21a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s42a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s42a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g65a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp T0g65a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s39a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s39a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x83a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp J6x83a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s43a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s43a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s40a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s40a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s41a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp K7s41a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g56a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp T0g56a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D9l63a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp D9l63a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D9l64a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp D9l64a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J3p65a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp J3p65a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J3p66a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp J3p66a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J3p67a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp J3p67a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J3p68a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp J3p68a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g70a Firmware	Before 001.2602b

Running on/with	Platform Versions
Hp T0g70a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G5j38a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp G5j38a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T1p99a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp T1p99a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp L3t99a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp L3t99a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Y0s19a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp Y0s19a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp G5j56a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp G5j56a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Y0s18a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp Y0s18a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp D9l18a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp D9l18a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp M9l66a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp M9l66a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp M9l67a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp M9l67a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g46a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp T0g46a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x76a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x76a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x78a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x78a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x80a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x80a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s37a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp K7s37a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp M9l70a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp M9l70a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x77a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x77a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x81a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x81a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp J6x79a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp J6x79a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp K7s38a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp K7s38a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g47a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp T0g47a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g48a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp T0g48a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp T0g49a Firmware	Before 001.2602a

Running on/with	Platform Versions
Hp T0g49a	All versions

Related CWEs

CWE-346

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (1)

https://support.hp.com/us-en/document/ish_14051823-14051849-16/hpsbpi04086

Source: hp-security-alert@hp.com

Vendor Advisory

Timeline

No history available yet.