VulnSocial

CVE-2026-1997General(hp / d9l18a)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

hp CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • d9l18a
  • d9l18a_firmware
  • d9l20a
  • d9l20a_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
hp
Products
d9l18ad9l18a_firmwared9l20ad9l20a_firmwared9l21ad9l21a_firmwared9l63ad9l63a_firmwared9l64ad9l64a_firmware

1 version affected across 82 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-10: 1Technical Details · 2026-02-10: 102-10
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    General

    CVE-2026-1997 Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to acce… https://www.cve.org/CVERecord?id=CVE-2026-1997

    Post summary

    The CVE identifies a misconfigured CORS issue on HP OfficeJet Pro printers that could let unauthorized web origins access sensitive information.

    00000102
    56.5K followersView on X
CPE platform detail82 entries

82 of 82 entries

PartVendorProductVersionTarget SWTarget HW
HWhpd9l18a---
OShpd9l18a_firmware---
HWhpd9l20a---
OShpd9l20a_firmware---
HWhpd9l21a---
OShpd9l21a_firmware---
HWhpd9l63a---
OShpd9l63a_firmware---
HWhpd9l64a---
OShpd9l64a_firmware---
HWhpg5j38a---
OShpg5j38a_firmware---
HWhpg5j56a---
OShpg5j56a_firmware---
HWhpj3p65a---
OShpj3p65a_firmware---
HWhpj3p66a---
OShpj3p66a_firmware---
HWhpj3p67a---
OShpj3p67a_firmware---
HWhpj3p68a---
OShpj3p68a_firmware---
HWhpj6x76a---
OShpj6x76a_firmware---
HWhpj6x77a---
OShpj6x77a_firmware---
HWhpj6x78a---
OShpj6x78a_firmware---
HWhpj6x79a---
OShpj6x79a_firmware---
HWhpj6x80a---
OShpj6x80a_firmware---
HWhpj6x81a---
OShpj6x81a_firmware---
HWhpj6x83a---
OShpj6x83a_firmware---
HWhpk7s32a---
OShpk7s32a_firmware---
HWhpk7s37a---
OShpk7s37a_firmware---
HWhpk7s38a---
OShpk7s38a_firmware---
HWhpk7s39a---
OShpk7s39a_firmware---
HWhpk7s40a---
OShpk7s40a_firmware---
HWhpk7s41a---
OShpk7s41a_firmware---
HWhpk7s42a---
OShpk7s42a_firmware---
HWhpk7s43a---
OShpk7s43a_firmware---
HWhpl3t99a---
OShpl3t99a_firmware---
HWhpm9l65a---
OShpm9l65a_firmware---
HWhpm9l66a---
OShpm9l66a_firmware---
HWhpm9l67a---
OShpm9l67a_firmware---
HWhpm9l70a---
OShpm9l70a_firmware---
HWhpt0g46a---
OShpt0g46a_firmware---
HWhpt0g47a---
OShpt0g47a_firmware---
HWhpt0g48a---
OShpt0g48a_firmware---
HWhpt0g49a---
OShpt0g49a_firmware---
HWhpt0g56a---
OShpt0g56a_firmware---
HWhpt0g65a---
OShpt0g65a_firmware---
HWhpt0g70a---
OShpt0g70a_firmware---
HWhpt1p99a---
OShpt1p99a_firmware---
HWhpy0s18a---
OShpy0s18a_firmware---
HWhpy0s19a---
OShpy0s19a_firmware---

Explore more

Back to dashboardhp CVEsd9l18a vulnerabilities