{"id":"CVE-2023-26068","aliases":["EUVD-2023-29942","GHSA-hhph-6cw5-hfgq"],"status":"published","title":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.11634,"percentile":0.96082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2023-04-10T00:00:00Z","modified":"2026-06-17T05:42:36Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/lexmark_faxtrace_settings","title":"Lexmark Device Embedded Web Server RCE","type":"exploit","platform":"Unix","date":"2023-03-13","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/lexmark_faxtrace_settings"}],"products":[{"vendor":"lexmark","product":"cslbl_firmware"},{"vendor":"lexmark","product":"cslbn_firmware"},{"vendor":"lexmark","product":"csnzj_firmware"},{"vendor":"lexmark","product":"cstat_firmware"},{"vendor":"lexmark","product":"cstmh_firmware"},{"vendor":"lexmark","product":"cstpc_firmware"},{"vendor":"lexmark","product":"cxlbl_firmware"},{"vendor":"lexmark","product":"cxlbn_firmware"},{"vendor":"lexmark","product":"cxnzj_firmware"},{"vendor":"lexmark","product":"cxtat_firmware"},{"vendor":"lexmark","product":"cxtmm_firmware"},{"vendor":"lexmark","product":"cxtpc_firmware"},{"vendor":"lexmark","product":"cxtpp_firmware"},{"vendor":"lexmark","product":"cxtzj_firmware"},{"vendor":"lexmark","product":"mslbd_firmware"},{"vendor":"lexmark","product":"mslsg_firmware"},{"vendor":"lexmark","product":"msngm_firmware"},{"vendor":"lexmark","product":"msngw_firmware"},{"vendor":"lexmark","product":"mstgw_firmware"},{"vendor":"lexmark","product":"mxlbd_firmware"},{"vendor":"lexmark","product":"mxlsg_firmware"},{"vendor":"lexmark","product":"mxngm_firmware"},{"vendor":"lexmark","product":"mxtct_firmware"},{"vendor":"lexmark","product":"mxtgm_firmware"},{"vendor":"lexmark","product":"mxtgw_firmware"},{"vendor":"lexmark","product":"mxtpm_firmware"}],"references":[{"url":"https://support.lexmark.com/alerts/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26068"},{"url":"https://support.lexmark.com/alerts"},{"url":"https://github.com/advisories/GHSA-hhph-6cw5-hfgq"}],"sources":{"cve":[{"id":"CVE-2023-26068","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","status":"published","published":"2023-04-10T00:00:00Z","modified":"2025-05-05T16:04:52.135Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-29942","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","status":"published","published":"2023-04-10T00:00:00Z","modified":"2025-05-05T16:04:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:56.98956Z"}],"ghsa":[{"id":"GHSA-hhph-6cw5-hfgq","title":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","status":"published","published":"2023-04-10T21:30:21Z","modified":"2024-04-04T03:23:11Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:14.332077Z"}],"nvd":[{"id":"CVE-2023-26068","description":"Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).","status":"published","published":"2023-04-10T20:15:10.483Z","modified":"2026-06-17T05:42:36.193Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}