CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
- Record
CVE-2025-26508- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2025-4204
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
- Record
EUVD-2025-4204- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cgcr-998g-rrqq
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially...
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
- Record
GHSA-cgcr-998g-rrqq- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
- Record
CVE-2025-26508- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers
- hp 499m6a firmware
- hp 499m7a firmware
- hp 499m8a firmware
- hp 499m9a firmware
- hp 499n0a firmware
- hp 499n1a firmware
- hp 499n4a firmware
- hp 499n5a firmware
- hp 499n6a firmware
- hp 499q3a firmware
- hp 499q3e firmware
Show 87 moreShow less
- hp 499q3f firmware
- hp 499q4e firmware
- hp 499q4f firmware
- hp 499q5a firmware
- hp 499q5e firmware
- hp 499q5f firmware
- hp 499q5fr firmware
- hp 499q6a firmware
- hp 499q6e firmware
- hp 499q6f firmware
- hp 499q7a firmware
- hp 499q7e firmware
- hp 499q7f firmware
- hp 499q8a firmware
- hp 499q8e firmware
- hp 499q8f firmware
- hp 499q9a firmware
- hp 499q9e firmware
- hp 499q9f firmware
- hp 499r0a firmware
- hp 499r0e firmware
- hp 499r0f firmware
- hp 4ra80a firmware
- hp 4ra80e firmware
- hp 4ra80f firmware
- hp 4ra81a firmware
- hp 4ra81e firmware
- hp 4ra81f firmware
- hp 4ra81fr firmware
- hp 4ra82a firmware
- hp 4ra82e firmware
- hp 4ra82f firmware
- hp 4ra82fr firmware
- hp 4ra83a firmware
- hp 4ra83e firmware
- hp 4ra83f firmware
- hp 4ra84a firmware
- hp 4ra84e firmware
- hp 4ra84f firmware
- hp 4ra85a firmware
- hp 4ra85e firmware
- hp 4ra85f firmware
- hp 4ra85v firmware
- hp 4ra86a firmware
- hp 4ra86e firmware
- hp 4ra86f firmware
- hp 4ra87a firmware
- hp 4ra87e firmware
- hp 4ra87f firmware
- hp 4ra88a firmware
- hp 4ra88e firmware
- hp 4ra88f firmware
- hp 4ra89a firmware
- hp 4ra89v firmware
- hp 5hh48a firmware
- hp 5hh48v firmware
- hp 5hh51a firmware
- hp 5hh52a firmware
- hp 5hh53a firmware
- hp 5hh59a firmware
- hp 5hh64a firmware
- hp 5hh64e firmware
- hp 5hh64f firmware
- hp 5hh65a firmware
- hp 5hh66a firmware
- hp 5hh67a firmware
- hp 5hh72a firmware
- hp 5hh73a firmware
- hp 74p25a firmware
- hp 74p26a firmware
- hp 74p27a firmware
- hp 74p28a firmware
- hp 74t92a firmware
- hp 74t92e firmware
- hp 74t92f firmware
- hp 759v0e firmware
- hp 759v0f firmware
- hp 759v1e firmware
- hp 759v1f firmware
- hp 759v2e firmware
- hp 759v2f firmware
- hp 8d7l0a firmware
- hp 8d7l1a firmware
- hp 8d7l2a firmware
- hp futuresmart 3
- hp futuresmart 4
- hp futuresmart 5
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-26508 is a high vulnerability (CVSS 8.3) in Hp, Inc. Certain Hp Laserjet Pro, Hp Laserjet Enterprise, Hp Laserjet Managed Printers, published February 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. No source names a fixed version.