Vulnerability in HP Advance Software Exposing Elevation of Privilege Risks
CVE-2026-89082

9.3CRITICAL

Key Information:

Vendor

HP Inc

Vendor
CVE Published:
16 September 2026

What is CVE-2026-89082?

HP Advance software has been found to contain security vulnerabilities that could allow an attacker to elevate privileges, resulting in potential unauthorized access to sensitive functions. Under specific conditions, these vulnerabilities may also permit remote code execution or arbitrary file writes, affecting the server that hosts the HP Advance software. Users should remain vigilant and consider taking precautionary measures to mitigate risks.

Affected Version(s)

HP AC Print & Scan 0

HP Output Central 0

References

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joseph Chiarchiaro, Independent Security Researcher
.