{"id":"CVE-2023-26067","aliases":["EUVD-2023-29941","GHSA-v2qx-4m4h-cjmg"],"status":"published","title":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.37835,"percentile":0.98557,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2023-04-10T00:00:00Z","modified":"2026-06-17T05:42:35Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/lexmark_faxtrace_settings","title":"Lexmark Device Embedded Web Server RCE","type":"exploit","platform":"Unix","date":"2023-03-13","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/lexmark_faxtrace_settings"},{"source":"nuclei","id":"CVE-2023-26067","title":"Lexmark Printers - Command Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26067.yaml"},{"source":"pocgithub","id":"horizon3ai/CVE-2023-26067","title":"horizon3ai/CVE-2023-26067","date":"2023-08-07","url":"https://github.com/horizon3ai/CVE-2023-26067"}],"products":[{"vendor":"lexmark","product":"cslbl_firmware"},{"vendor":"lexmark","product":"cslbn_firmware"},{"vendor":"lexmark","product":"csnzj_firmware"},{"vendor":"lexmark","product":"cstat_firmware"},{"vendor":"lexmark","product":"cstmh_firmware"},{"vendor":"lexmark","product":"cstpc_firmware"},{"vendor":"lexmark","product":"cxlbl_firmware"},{"vendor":"lexmark","product":"cxlbn_firmware"},{"vendor":"lexmark","product":"cxnzj_firmware"},{"vendor":"lexmark","product":"cxtat_firmware"},{"vendor":"lexmark","product":"cxtmm_firmware"},{"vendor":"lexmark","product":"cxtpc_firmware"},{"vendor":"lexmark","product":"cxtpp_firmware"},{"vendor":"lexmark","product":"cxtzj_firmware"},{"vendor":"lexmark","product":"mslbd_firmware"},{"vendor":"lexmark","product":"mslsg_firmware"},{"vendor":"lexmark","product":"msngm_firmware"},{"vendor":"lexmark","product":"msngw_firmware"},{"vendor":"lexmark","product":"mstgw_firmware"},{"vendor":"lexmark","product":"mxlbd_firmware"},{"vendor":"lexmark","product":"mxlsg_firmware"},{"vendor":"lexmark","product":"mxngm_firmware"},{"vendor":"lexmark","product":"mxtct_firmware"},{"vendor":"lexmark","product":"mxtgm_firmware"},{"vendor":"lexmark","product":"mxtgw_firmware"},{"vendor":"lexmark","product":"mxtpm_firmware"}],"references":[{"url":"https://support.lexmark.com/alerts/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26067"},{"url":"https://support.lexmark.com/alerts"},{"url":"https://github.com/advisories/GHSA-v2qx-4m4h-cjmg"}],"sources":{"cve":[{"id":"CVE-2023-26067","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","status":"published","published":"2023-04-10T00:00:00Z","modified":"2025-02-11T16:05:04.335Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-29941","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","status":"published","published":"2023-04-10T00:00:00Z","modified":"2025-02-11T16:05:04Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:59.282543Z"}],"ghsa":[{"id":"GHSA-v2qx-4m4h-cjmg","title":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","status":"published","published":"2023-04-10T21:30:21Z","modified":"2024-04-04T03:23:16Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:14.332077Z"}],"nvd":[{"id":"CVE-2023-26067","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).","status":"published","published":"2023-04-10T20:15:10.387Z","modified":"2026-06-17T05:42:35.953Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}