CVE-2026-4682
High
Description
Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.
SeverityHigh
CVSS8.7
Exploit probability—
ProductHP DeskJet 2800e All-in-One Printer series
PublishedApr 15, 2026
First seenApr 15, 2026
Weakness typeCWE-121CWE-121
How to fix
Update
- HP Inc HP DeskJet 2800e All-in-One Printer series<2612A or later
- HP Inc HP DeskJet 4200 All-in-One Printer series<2612A or later
- HP Inc HP DeskJet Ink Advantage 4200 All-in-One Printer series<2612A or later
- HP Inc HP DeskJet 4200e All-in-One Printer series<2612A or later
- HP Inc HP DeskJet Ink Advantage Ultra 4900 series<2612A or later
- HP Inc HP DeskJet Ink Advantage 2800 All-in-One Printer series<2612A or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc HP DeskJet 2800e All-in-One Printer series | v < <2612A | <2612A |
| HP Inc HP DeskJet 4200 All-in-One Printer series | v < <2612A | <2612A |
| HP Inc HP DeskJet Ink Advantage 4200 All-in-One Printer series | v < <2612A | <2612A |
| HP Inc HP DeskJet 4200e All-in-One Printer series | v < <2612A | <2612A |
| HP Inc HP DeskJet Ink Advantage Ultra 4900 series | v < <2612A | <2612A |
| HP Inc HP DeskJet Ink Advantage 2800 All-in-One Printer series | v < <2612A | <2612A |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.