Cross-Site Scripting Vulnerability in HP App for Android from HP
CVE-2026-1578

5.1MEDIUM

Key Information:

Vendor

HP Inc

Status
HP App
Vendor
CVE Published:
13 February 2026

What is CVE-2026-1578?

The HP App for Android exhibits a potential vulnerability to cross-site scripting, primarily when outdated versions of the application are in use on mobile devices. This vulnerability allows attackers to inject malicious scripts, potentially compromising user interactions and data. HP is actively addressing this issue by releasing timely updates that mitigate these risks, urging users to maintain the latest version of the application for enhanced security.

Affected Version(s)

HP App Android 0

References

https://support.hp.com/us-en/document/ish_14083522-140836...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.