Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-89083: HP Advance server can be taken over remotely
CVE-2026-89083 · published 26 days ago
Summary
The HP Advance server that runs the HP AC Print & Scan and HP Output Central software may allow an attacker to gain higher privileges, run their own code, or write files on the system. This could let them control the server or disrupt services. Install the security updates provided by HP as soon as possible.
What to do
- Update hp inc hp ac print & scan to version <V1R4.0.027 or later.
- Update hp inc hp output central to version <V1R4.0.029 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hp inc | hp ac print & scan | < <V1R4.0.027 |
| hp inc | hp output central | < <V1R4.0.029 |
Original advisory text
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
HP
has identified potential security vulnerabilities in the HP Advance software
that may enable elevation of privilege, remote code execution, or arbitrary
file write under certain conditions, impacting the HP Advance server hosting
the software.
has identified potential security vulnerabilities in the HP Advance software
that may enable elevation of privilege, remote code execution, or arbitrary
file write under certain conditions, impacting the HP Advance server hosting
the software.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
9.3
Critical
Type
CWE-94Code Injection
Timeline
Published16 Sep 2026
Updated11 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta