{"id":"CVE-2026-89082","aliases":["EUVD-2026-81089","GHSA-hq92-gr4h-4mr3"],"status":"published","title":"HP Advance – Potential Elevation of Privilege, Remote Code Execution \u0026 Arbitrary File Write","description":"HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00696,"percentile":0.5326,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-09-16T19:50:40Z","modified":"2026-09-18T19:34:36Z","products":[{"vendor":"hp inc","product":"hp ac print \u0026 scan"},{"vendor":"hp inc","product":"hp output central"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89082"},{"url":"https://github.com/advisories/GHSA-hq92-gr4h-4mr3"}],"sources":{"cve":[{"id":"CVE-2026-89082","title":"HP Advance – Potential Elevation of Privilege, Remote Code Execution \u0026 Arbitrary File Write","description":"HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.","status":"published","published":"2026-09-16T19:50:40.614Z","modified":"2026-09-17T16:08:03.733Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:19:55.176387Z"}],"euvd":[{"id":"EUVD-2026-81089","description":"HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.","status":"published","published":"2026-09-16T19:50:40Z","modified":"2026-09-17T16:08:03Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T17:28:11.273554Z"}],"ghsa":[{"id":"GHSA-hq92-gr4h-4mr3","title":"HP has identified potential security vulnerabilities in the HP Advance software that may enable...","description":"HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.","status":"published","published":"2026-09-16T21:32:47Z","modified":"2026-09-16T21:32:55Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:12:02.095044Z"}],"nvd":[{"id":"CVE-2026-89082","description":"HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.","status":"published","published":"2026-09-16T20:17:38.573Z","modified":"2026-09-18T19:34:36.657Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:49.013904Z"}]}}