Denial of Service Vulnerability in HP ENVY 5000 Series Printers

CVE-2026-42626

What is CVE-2026-42626?

HP ENVY 5000 series printers with specific firmware versions exhibit a critical vulnerability related to the management of concurrent TCP connections on port 9100. This issue allows unauthorized remote attackers on the same network to maintain persistent connections by sending keep-alive packets. The lack of proper connection timeouts or limits on concurrent sessions leads to a denial of service condition, where the printer becomes unresponsive to all commands and print jobs. Recovery from this state requires manual intervention to restart the device, and the attack can be re-executed immediately, posing ongoing threats to printer availability and usability.

References