CVE-2026-1997: Certain HP OfficeJet Pro Printers - Information Disclosure

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-10 · updated 2026-06-17
Weakness: CWE-346

Description

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

Affected products

HP D9L18A Firmware: before 001.2602a — fixed in 001.2602a
HP D9L20A Firmware: before 001.2602b — fixed in 001.2602b
HP D9L21A Firmware: before 001.2602b — fixed in 001.2602b
HP D9L63A Firmware: before 001.2602b — fixed in 001.2602b
HP D9L64A Firmware: before 001.2602b — fixed in 001.2602b
HP G5J38A Firmware: before 001.2602a — fixed in 001.2602a
HP G5J56A Firmware: before 001.2602a — fixed in 001.2602a
HP J3P65A Firmware: before 001.2602b — fixed in 001.2602b
HP J3P66A Firmware: before 001.2602b — fixed in 001.2602b
HP J3P67A Firmware: before 001.2602b — fixed in 001.2602b
HP J3P68A Firmware: before 001.2602b — fixed in 001.2602b
HP J6X76A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X77A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X78A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X79A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X80A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X81A Firmware: before 001.2602a — fixed in 001.2602a
HP J6X83A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S32A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S37A Firmware: before 001.2602a — fixed in 001.2602a
HP K7S38A Firmware: before 001.2602a — fixed in 001.2602a
HP K7S39A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S40A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S41A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S42A Firmware: before 001.2602b — fixed in 001.2602b
HP K7S43A Firmware: before 001.2602b — fixed in 001.2602b
HP L3T99A Firmware: before 001.2602a — fixed in 001.2602a
HP M9L65A Firmware: before 001.2602a — fixed in 001.2602a
HP M9L66A Firmware: before 001.2602a — fixed in 001.2602a
HP M9L67A Firmware: before 001.2602a — fixed in 001.2602a

How to fix

Upgrade to a fixed version: HP D9L18A Firmware 001.2602a; HP D9L20A Firmware 001.2602b; HP D9L21A Firmware 001.2602b; HP D9L63A Firmware 001.2602b; HP D9L64A Firmware 001.2602b; HP G5J38A Firmware 001.2602a; HP G5J56A Firmware 001.2602a; HP J3P65A Firmware 001.2602b; HP J3P66A Firmware 001.2602b; HP J3P67A Firmware 001.2602b; HP J3P68A Firmware 001.2602b; HP J6X76A Firmware 001.2602a. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_14051823-14051849-16/hpsbpi04086

Get alerted when CVE-2026-1997 or the next vulnerability affects your stack