CVE-2026-2832

Certain Samsung MultiXpress Multifunction Printers Firmware – Potential Information Disclosure

State: Published
Severity: 5.3 Medium
Published: Feb 20, 2026
Updated: Feb 20, 2026
Reserved: Feb 19, 2026

Description

Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuration information through specific APIs without proper authorization.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N	hp

Weaknesses

CWE-200

Affected Products

Product	Versions
Samsung MultiXpress SL-X7600LXR, SL-X7500LXR, SL-X7400LXRHP Inc	before <V6.D6.00.0801482.04Affected
Samsung MultiXpress SL-K7400LXR, SL-K7500LXR, SL-K7600LXRHP Inc	before <V5.D6.00.0801482.02Affected
SL-X4225RX, SL-X4255LX, SL-X4305LXHP Inc	before <V6.33.07.00.0801481.01Affected
SL-K4255RX, SL-K4305LX, SL-K4355LXHP Inc	before <V5.33.07.00.0801481.01Affected

References

https://support.hp.com/us-en/document/ish_14108019-14108039-16/hpsbpi04094

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.