CVE-2026-13753: Certain HP DeskJet All in One – Potential Information Disclosure

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-06 · updated 2026-10-25
Weakness: CWE-703

Description

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.

Affected products

HP Inc HP DeskJet 2810 Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2810e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2820 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2820 All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2820e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2821 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2821e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2821e All-in-One: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2822 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2822e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2823 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2823e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2825e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2827e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2828 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2829 AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2842e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2842e All-in-One: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2842e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2852e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 2855e AIO Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4210e All-in-One: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4220 All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4220e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4221 All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4222e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4227 All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4228 All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4230e All-in-One Printer: before <001.2629A — fixed in <001.2629A
HP Inc HP DeskJet 4252e All-in-One: before <001.2629A — fixed in <001.2629A

How to fix

Upgrade to a fixed version: HP Inc HP DeskJet 2810 Printer <001.2629A; HP Inc HP DeskJet 2810e AIO Printer <001.2629A; HP Inc HP DeskJet 2820 AIO Printer <001.2629A; HP Inc HP DeskJet 2820 All-in-One Printer <001.2629A; HP Inc HP DeskJet 2820e AIO Printer <001.2629A; HP Inc HP DeskJet 2821 AIO Printer <001.2629A; HP Inc HP DeskJet 2821e AIO Printer <001.2629A; HP Inc HP DeskJet 2821e All-in-One <001.2629A; HP Inc HP DeskJet 2822 AIO Printer <001.2629A; HP Inc HP DeskJet 2822e AIO Printer <001.2629A; HP Inc HP DeskJet 2823 AIO Printer <001.2629A; HP Inc HP DeskJet 2823e AIO Printer <001.2629A. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-13753 or the next vulnerability affects your stack