Unauthorized Access in HP Deskjet 2800 Series Printers by Embedded Webserver

CVE-2026-13753

What is CVE-2026-13753?

A missing authorization vulnerability has been identified in the embedded webserver of HP Deskjet 2800 Series Printers. This issue allows an unauthenticated attacker with network access to exploit multiple exposed administrative API endpoints, potentially revealing sensitive configuration data. Information accessible includes plaintext Wi-Fi Direct credentials, unique device identity, and various administrative security settings. While these settings normally require administrator credentials for access through the web interface, the lack of proper authorization checks presents a significant security risk.

References