CVE-2026-89083

HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

State: Published
Severity: 9.3 Critical
Published: Sep 16, 2026
Updated: Sep 17, 2026
Reserved: Sep 10, 2026

Description

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N	hp

Weaknesses

CWE-94

Affected Products

Product	Versions
HP AC Print & ScanHP Inc	before <V1R4.0.027Affected
HP Output CentralHP Inc	before <V1R4.0.029Affected

References

https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.