Threat Investigation
Request a demo

CVE-2026-1578

Medium

Description

HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities.

SeverityMedium
CVSS5.1
Exploit probability—
ProductHP App
PublishedFeb 13, 2026
First seenFeb 13, 2026
Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update
  • HP Inc HP App<26.0.0.6234 or later

Affected products

ProductAffected versionsFixed in
HP Inc HP Appv < <26.0.0.6234<26.0.0.6234

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.