HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-22 18:32 UTC
Importiert: 2026-09-27 04:21 UTC
CVSS: 9.3
Quelle-ID: full_disc
uid_hash: 449367e358a4ac2954b048a305861ec4f9930c972e0646fbd0694b537c688961

Full Disclosure

Posted by Joe via Fulldisclosure on Sep 22 HP Advance / HP Output Central

Unauthenticated SYSTEM RCE, authorization bypass, and arbitrary file

write/delete

CVE-2026-89082, CVE-2026-89083, CVE-2026-89084

================================================================

SUMMARY

================================================================

Vendor: HP Inc.

Product family named by HP: HP Advance

Products in HP's update table: HP AC Print & Scan; HP Output Central

Components:...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	Veroeffentlicht (CVE.org)
CVE-2026-89082	CRITICAL	9.3	CRITICAL	9.3	2026-09-16
CVE-2026-89083	CRITICAL	9.3	CRITICAL	9.3	2026-09-16
CVE-2026-89084	CRITICAL	9.3	HIGH	8.8	2026-09-16

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss