{"id":"CVE-2026-89083","aliases":["EUVD-2026-81090","GHSA-449r-f525-6h4x"],"status":"published","title":"HP Advance – Potential Elevation of Privilege, Remote Code Execution \u0026 Arbitrary File Write","description":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00696,"percentile":0.5328,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-09-16T19:53:06Z","modified":"2026-09-18T19:34:36Z","products":[{"vendor":"hp inc","product":"hp ac print \u0026 scan"},{"vendor":"hp inc","product":"hp output central"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89083"},{"url":"https://github.com/advisories/GHSA-449r-f525-6h4x"}],"sources":{"cve":[{"id":"CVE-2026-89083","title":"HP Advance – Potential Elevation of Privilege, Remote Code Execution \u0026 Arbitrary File Write","description":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software.","status":"published","published":"2026-09-16T19:53:06.331Z","modified":"2026-09-17T16:07:02.087Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:19:55.176387Z"}],"euvd":[{"id":"EUVD-2026-81090","description":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software.","status":"published","published":"2026-09-16T19:53:06Z","modified":"2026-09-17T16:07:02Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N","level":"critical"}],"updated_at":"2026-11-02T17:28:11.273554Z"}],"ghsa":[{"id":"GHSA-449r-f525-6h4x","title":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable...","description":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software.","status":"published","published":"2026-09-16T21:32:47Z","modified":"2026-09-16T21:32:54Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:12:02.095044Z"}],"nvd":[{"id":"CVE-2026-89083","description":"HP\nhas identified potential security vulnerabilities in the HP Advance software\nthat may enable elevation of privilege, remote code execution, or arbitrary\nfile write under certain conditions, impacting the HP Advance server hosting\nthe software.","status":"published","published":"2026-09-16T20:17:38.703Z","modified":"2026-09-18T19:34:36.657Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:49.013904Z"}]}}