Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.
History

Thu, 12 Feb 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Hp
Hp d9l18a
Hp d9l18a Firmware
Hp d9l20a
Hp d9l20a Firmware
Hp d9l21a
Hp d9l21a Firmware
Hp d9l63a
Hp d9l63a Firmware
Hp d9l64a
Hp d9l64a Firmware
Hp g5j38a
Hp g5j38a Firmware
Hp g5j56a
Hp g5j56a Firmware
Hp j3p65a
Hp j3p65a Firmware
Hp j3p66a
Hp j3p66a Firmware
Hp j3p67a
Hp j3p67a Firmware
Hp j3p68a
Hp j3p68a Firmware
Hp j6x76a
Hp j6x76a Firmware
Hp j6x77a
Hp j6x77a Firmware
Hp j6x78a
Hp j6x78a Firmware
Hp j6x79a
Hp j6x79a Firmware
Hp j6x80a
Hp j6x80a Firmware
Hp j6x81a
Hp j6x81a Firmware
Hp j6x83a
Hp j6x83a Firmware
Hp k7s32a
Hp k7s32a Firmware
Hp k7s37a
Hp k7s37a Firmware
Hp k7s38a
Hp k7s38a Firmware
Hp k7s39a
Hp k7s39a Firmware
Hp k7s40a
Hp k7s40a Firmware
Hp k7s41a
Hp k7s41a Firmware
Hp k7s42a
Hp k7s42a Firmware
Hp k7s43a
Hp k7s43a Firmware
Hp l3t99a
Hp l3t99a Firmware
Hp m9l65a
Hp m9l65a Firmware
Hp m9l66a
Hp m9l66a Firmware
Hp m9l67a
Hp m9l67a Firmware
Hp m9l70a
Hp m9l70a Firmware
Hp t0g46a
Hp t0g46a Firmware
Hp t0g47a
Hp t0g47a Firmware
Hp t0g48a
Hp t0g48a Firmware
Hp t0g49a
Hp t0g49a Firmware
Hp t0g56a
Hp t0g56a Firmware
Hp t0g65a
Hp t0g65a Firmware
Hp t0g70a
Hp t0g70a Firmware
Hp t1p99a
Hp t1p99a Firmware
Hp y0s18a
Hp y0s18a Firmware
Hp y0s19a
Hp y0s19a Firmware
CPEs cpe:2.3:h:hp:d9l18a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:d9l20a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:d9l21a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:g5j38a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:g5j56a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j3p65a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j3p66a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j3p67a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x76a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x77a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x78a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x79a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x80a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x81a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:j6x83a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s32a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s37a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s38a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s39a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s40a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s41a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s42a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:k7s43a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:l3t99a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:m9l65a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:m9l66a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:m9l67a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:m9l70a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g46a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g47a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g48a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g49a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g56a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g65a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:t1p99a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:y0s18a:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:y0s19a:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:d9l18a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:g5j38a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:g5j56a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j3p66a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j3p67a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x76a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x77a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x78a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x79a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x80a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x81a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:j6x83a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s32a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s37a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s38a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s39a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s40a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s41a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s42a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:k7s43a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:l3t99a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:m9l65a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:m9l66a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:m9l67a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:m9l70a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g46a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g47a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g48a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g49a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g56a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g65a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:t1p99a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:y0s18a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:y0s19a_firmware:*:*:*:*:*:*:*:*
Vendors & Products Hp
Hp d9l18a
Hp d9l18a Firmware
Hp d9l20a
Hp d9l20a Firmware
Hp d9l21a
Hp d9l21a Firmware
Hp d9l63a
Hp d9l63a Firmware
Hp d9l64a
Hp d9l64a Firmware
Hp g5j38a
Hp g5j38a Firmware
Hp g5j56a
Hp g5j56a Firmware
Hp j3p65a
Hp j3p65a Firmware
Hp j3p66a
Hp j3p66a Firmware
Hp j3p67a
Hp j3p67a Firmware
Hp j3p68a
Hp j3p68a Firmware
Hp j6x76a
Hp j6x76a Firmware
Hp j6x77a
Hp j6x77a Firmware
Hp j6x78a
Hp j6x78a Firmware
Hp j6x79a
Hp j6x79a Firmware
Hp j6x80a
Hp j6x80a Firmware
Hp j6x81a
Hp j6x81a Firmware
Hp j6x83a
Hp j6x83a Firmware
Hp k7s32a
Hp k7s32a Firmware
Hp k7s37a
Hp k7s37a Firmware
Hp k7s38a
Hp k7s38a Firmware
Hp k7s39a
Hp k7s39a Firmware
Hp k7s40a
Hp k7s40a Firmware
Hp k7s41a
Hp k7s41a Firmware
Hp k7s42a
Hp k7s42a Firmware
Hp k7s43a
Hp k7s43a Firmware
Hp l3t99a
Hp l3t99a Firmware
Hp m9l65a
Hp m9l65a Firmware
Hp m9l66a
Hp m9l66a Firmware
Hp m9l67a
Hp m9l67a Firmware
Hp m9l70a
Hp m9l70a Firmware
Hp t0g46a
Hp t0g46a Firmware
Hp t0g47a
Hp t0g47a Firmware
Hp t0g48a
Hp t0g48a Firmware
Hp t0g49a
Hp t0g49a Firmware
Hp t0g56a
Hp t0g56a Firmware
Hp t0g65a
Hp t0g65a Firmware
Hp t0g70a
Hp t0g70a Firmware
Hp t1p99a
Hp t1p99a Firmware
Hp y0s18a
Hp y0s18a Firmware
Hp y0s19a
Hp y0s19a Firmware
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}


Wed, 11 Feb 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Hp Inc
Hp Inc hp Officejet Pro 7720 Wide Format All-in-one Printer Series
Hp Inc hp Officejet Pro 7730 Wide Format All-in-one Printer
Hp Inc hp Officejet Pro 7740 Wide Format All-in-one Printer Series
Hp Inc hp Officejet Pro 8210 Printer Series
Hp Inc hp Officejet Pro 8710 All-in-one Printer Series
Hp Inc hp Officejet Pro 8730 All-in-one Printer
Hp Inc hp Officejet Pro 8730 Mono Printer Series
Hp Inc hp Officejet Pro 8740 All-in-one Printer Series
Vendors & Products Hp Inc
Hp Inc hp Officejet Pro 7720 Wide Format All-in-one Printer Series
Hp Inc hp Officejet Pro 7730 Wide Format All-in-one Printer
Hp Inc hp Officejet Pro 7740 Wide Format All-in-one Printer Series
Hp Inc hp Officejet Pro 8210 Printer Series
Hp Inc hp Officejet Pro 8710 All-in-one Printer Series
Hp Inc hp Officejet Pro 8730 All-in-one Printer
Hp Inc hp Officejet Pro 8730 Mono Printer Series
Hp Inc hp Officejet Pro 8740 All-in-one Printer Series

Tue, 10 Feb 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 10 Feb 2026 18:15:00 +0000

Type Values Removed Values Added
Description Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.
Title Certain HP OfficeJet Pro Printers - Information Disclosure
Weaknesses CWE-346
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hp

Published:

Updated: 2026-02-10T20:14:16.309Z

Reserved: 2026-02-05T16:51:16.104Z

Link: CVE-2026-1997

cve-icon Vulnrichment

Updated: 2026-02-10T20:13:53.646Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-10T18:16:22.513

Modified: 2026-02-12T15:13:31.403

Link: CVE-2026-1997

cve-icon Redhat

No data.