Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

HP Advance server could let attackers run code

CVE-2026-89082 · published 26 days ago
Summary

The HP Advance software running on the HP AC Print & Scan and HP Output Central servers may allow a malicious user to gain higher privileges, execute their own programs, or write files they shouldn't. This could let an attacker take control of the server or alter data. Apply the latest security updates from HP as soon as possible and restrict access to the server to trusted users only.

What to do
  • Update hp inc hp ac print & scan to version <V1R4.0.027 or later.
  • Update hp inc hp output central to version <V1R4.0.029 or later.
Affected software
VendorProductAffected versions
hp inc hp ac print & scan < <V1R4.0.027
hp inc hp output central < <V1R4.0.029
Original advisory text
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published16 Sep 2026
Updated11 Oct 2026
First seen16 Sep 2026
Sources
CVE-2026-89082 · NVD
CVE-2026-89082 · MITRE
Track software like this
Free during beta