CVE-2025-26508: Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-14 · updated 2026-06-17
Weakness: CWE-787

Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

Affected products

HP 499M6A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499M7A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499M8A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499M9A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499N0A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499N1A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499N4A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499N5A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499N6A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q3A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q3E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q3F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q4E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q4F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q5A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q5E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q5F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q5Fr Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q6A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q6E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q6F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q7A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q7E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q7F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q8A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q8E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q8F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q9A Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q9E Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146
HP 499Q9F Firmware: before 6.17.5.34-202412122146 — fixed in 6.17.5.34-202412122146

How to fix

Upgrade to a fixed version: HP 499M6A Firmware 6.17.5.34-202412122146; HP 499M7A Firmware 6.17.5.34-202412122146; HP 499M8A Firmware 6.17.5.34-202412122146; HP 499M9A Firmware 6.17.5.34-202412122146; HP 499N0A Firmware 6.17.5.34-202412122146; HP 499N1A Firmware 6.17.5.34-202412122146; HP 499N4A Firmware 6.17.5.34-202412122146; HP 499N5A Firmware 6.17.5.34-202412122146; HP 499N6A Firmware 6.17.5.34-202412122146; HP 499Q3A Firmware 6.17.5.34-202412122146; HP 499Q3E Firmware 6.17.5.34-202412122146; HP 499Q3F Firmware 6.17.5.34-202412122146. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007

Get alerted when CVE-2025-26508 or the next vulnerability affects your stack