CVE Feed

    Dashboard / CVE / CVE-2026-1997

    CVE-2026-1997

    Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

    Published:Feb 10, 2026
    Last Modified:Apr 17, 2026
    EPS:Feb 10, 2026
    EPSS Score:0.00005
    CVSS Score:5.3

    Affected Products

    Vendor
    Hp
    Product
    D9l18a
    Vendor
    Hp
    Product
    D9l18a Firmware
    Vendor
    Hp
    Product
    D9l20a
    Vendor
    Hp
    Product
    D9l20a Firmware
    Vendor
    Hp
    Product
    D9l21a
    Vendor
    Hp
    Product
    D9l21a Firmware
    Vendor
    Hp
    Product
    D9l63a
    Vendor
    Hp
    Product
    D9l63a Firmware
    Vendor
    Hp
    Product
    D9l64a
    Vendor
    Hp
    Product
    D9l64a Firmware
    Vendor
    Hp
    Product
    G5j38a
    Vendor
    Hp
    Product
    G5j38a Firmware
    Vendor
    Hp
    Product
    G5j56a
    Vendor
    Hp
    Product
    G5j56a Firmware
    Vendor
    Hp
    Product
    J3p65a
    Vendor
    Hp
    Product
    J3p65a Firmware
    Vendor
    Hp
    Product
    J3p66a
    Vendor
    Hp
    Product
    J3p66a Firmware
    Vendor
    Hp
    Product
    J3p67a
    Vendor
    Hp
    Product
    J3p67a Firmware
    Vendor
    Hp
    Product
    J3p68a
    Vendor
    Hp
    Product
    J3p68a Firmware
    Vendor
    Hp
    Product
    J6x76a
    Vendor
    Hp
    Product
    J6x76a Firmware
    Vendor
    Hp
    Product
    J6x77a
    Vendor
    Hp
    Product
    J6x77a Firmware
    Vendor
    Hp
    Product
    J6x78a
    Vendor
    Hp
    Product
    J6x78a Firmware
    Vendor
    Hp
    Product
    J6x79a
    Vendor
    Hp
    Product
    J6x79a Firmware
    Vendor
    Hp
    Product
    J6x80a
    Vendor
    Hp
    Product
    J6x80a Firmware
    Vendor
    Hp
    Product
    J6x81a
    Vendor
    Hp
    Product
    J6x81a Firmware
    Vendor
    Hp
    Product
    J6x83a
    Vendor
    Hp
    Product
    J6x83a Firmware
    Vendor
    Hp
    Product
    K7s32a
    Vendor
    Hp
    Product
    K7s32a Firmware
    Vendor
    Hp
    Product
    K7s37a
    Vendor
    Hp
    Product
    K7s37a Firmware
    Vendor
    Hp
    Product
    K7s38a
    Vendor
    Hp
    Product
    K7s38a Firmware
    Vendor
    Hp
    Product
    K7s39a
    Vendor
    Hp
    Product
    K7s39a Firmware
    Vendor
    Hp
    Product
    K7s40a
    Vendor
    Hp
    Product
    K7s40a Firmware
    Vendor
    Hp
    Product
    K7s41a
    Vendor
    Hp
    Product
    K7s41a Firmware
    Vendor
    Hp
    Product
    K7s42a
    Vendor
    Hp
    Product
    K7s42a Firmware
    Vendor
    Hp
    Product
    K7s43a
    Vendor
    Hp
    Product
    K7s43a Firmware
    Vendor
    Hp
    Product
    L3t99a
    Vendor
    Hp
    Product
    L3t99a Firmware
    Vendor
    Hp
    Product
    M9l65a
    Vendor
    Hp
    Product
    M9l65a Firmware
    Vendor
    Hp
    Product
    M9l66a
    Vendor
    Hp
    Product
    M9l66a Firmware
    Vendor
    Hp
    Product
    M9l67a
    Vendor
    Hp
    Product
    M9l67a Firmware
    Vendor
    Hp
    Product
    M9l70a
    Vendor
    Hp
    Product
    M9l70a Firmware
    Vendor
    Hp
    Product
    T0g46a
    Vendor
    Hp
    Product
    T0g46a Firmware
    Vendor
    Hp
    Product
    T0g47a
    Vendor
    Hp
    Product
    T0g47a Firmware
    Vendor
    Hp
    Product
    T0g48a
    Vendor
    Hp
    Product
    T0g48a Firmware
    Vendor
    Hp
    Product
    T0g49a
    Vendor
    Hp
    Product
    T0g49a Firmware
    Vendor
    Hp
    Product
    T0g56a
    Vendor
    Hp
    Product
    T0g56a Firmware
    Vendor
    Hp
    Product
    T0g65a
    Vendor
    Hp
    Product
    T0g65a Firmware
    Vendor
    Hp
    Product
    T0g70a
    Vendor
    Hp
    Product
    T0g70a Firmware
    Vendor
    Hp
    Product
    T1p99a
    Vendor
    Hp
    Product
    T1p99a Firmware
    Vendor
    Hp
    Product
    Y0s18a
    Vendor
    Hp
    Product
    Y0s18a Firmware
    Vendor
    Hp
    Product
    Y0s19a
    Vendor
    Hp
    Product
    Y0s19a Firmware
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 7720 Wide Format All-in-one Printer Series
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 7730 Wide Format All-in-one Printer
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 7740 Wide Format All-in-one Printer Series
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 8210 Printer Series
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 8710 All-in-one Printer Series
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 8730 All-in-one Printer
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 8730 Mono Printer Series
    Vendor
    Hp Inc
    Product
    Hp Officejet Pro 8740 All-in-one Printer Series

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-346 Origin Validation Error

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High