HP Inc.CVE-2026-13753
HP DeskJet: information disclosure
High7.5CVE-2026-13753 · Published Jul 6, 2026 · updated Aug 31, 2026
Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| HP DeskJet 2810 Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2820 AIO Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2820 All-in-One Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2820e AIO Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2821 AIO Printer Product | < <001.2629A | <001.2629A |
| < <001.2629A | <001.2629A | |
| HP DeskJet 2822 AIO Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2823 AIO Printer Product | < <001.2629A | <001.2629A |
| < <001.2629A | <001.2629A | |
| HP DeskJet 2828 AIO Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2829 AIO Printer Product | < <001.2629A | <001.2629A |
| HP DeskJet 2842e All-in-One Product | < <001.2629A | <001.2629A |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-703
More HP Inc. advisories
All HP Inc.| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 17 | HP Smart Tank: denial of service | Medium6.9 | 5101 All-in-One Printer <001.2630C+2 more |
| Aug 17 | HP Web Jetadmin: untrusted search path | High8.9 | <10.6 |
| Aug 3 | HP DesignJet T3500: cross-site scripting | Medium6.9 | AENEAS_04_09_09.1 |
| Jul 8 | HP Poly: cross-site request forgery | Medium6.0 | 9.50+2 more |
| Jul 8 | HP Poly: cross-site scripting | Medium5.9 | 9.5.0+2 more |
| Jul 1 | HP CCX: resource exhaustion | High8.2 | 9.50+2 more |