Critical severity · published Feb 14, 2025
CVE-2025-26507
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers · HP, Inc.
See HP security bulletin reference for affected versions · source: vendor
F3
Futuresmart 3 · HP
before 2309118_002276; before 2309118_002274; before 2309118_002275 · source: NVD
F4
Futuresmart 4 · HP
before 2411278_068111; before 2411278_068112; before 2411278_068114; before 2411278_068113 · source: NVD
F5
Futuresmart 5 · HP
before 2508402_000067; before 2508402_000106; before 2508402_000106; before 2508402_000090; before 2508125_000009; before 2508402_000058; +34 more · source: NVD
Affected product
CH
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers
HP, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-26507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-26507
Vendor Advisory
https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007
More from Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers
9.8
CVE-2025-26508
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege
9.8
CVE-2025-26506
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege