HP Inc.CVE-2026-89083

HP AC Print & Scan: privilege escalation

CVE-2026-89083 · Published Sep 16, 2026 · updated Sep 18, 2026

Critical9.3

Fix: upgrade to <V1R4.0.027 or later (2 fixed versions below)

has identified potential security vulnerabilities in the HP Advance software

that may enable elevation of privilege, remote code execution, or arbitrary

file write under certain conditions, impacting the HP Advance server hosting

the software.

Affected versions

Package	Affected	Fixed in
HP AC Print & Scan Product	< <V1R4.0.027	<V1R4.0.027
HP Output Central Product	< <V1R4.0.029	<V1R4.0.029

Details and references

CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-94