CVE-2026-4682Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://support.hp.com/us-en/document/ish_14744451-14744475-16

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
Disclo ure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-04-15); latest day: 1
5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d

Signal classification3 categories

Disclosure

360.0%

Disclo ure

120.0%

General

120.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-15	4	Disclo ure1Disclosure2General1
2026-04-16	1	Disclosure1

Full discourse5 posts

TheZDIBugs@TheZDIBugs175d
Disclosure
[ZDI-26-280|CVE-2026-4682] (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8; Credit: Team Neodyme (@Neodyme)) https://www.zerodayinitiative.com/advisories/ZDI-26-280/
Post summary
Zero Day Initiative released an advisory for CVE-2026-4682, a stack‑based buffer overflow leading to RCE in an HP DeskJet 2855e model, with a CVSS of 8.8 and no indications of current exploitation.
001211.4K
5.5K followersView on X
Tonernews@tonernews175d
Disclo ure
New Security Flaw in HP DeskJet 2800e Series Puts Millions of Users in Jeopardy. (CVE-2026-4682) https://tonernews.com/forums/topic/new-security-flaw-in-hp-deskjet-2800e-series-puts-millions-of-users-in-jeopardy-cve-2026-4682/ #print #printer #toner #tonercartridge #InkCartridge #Printing #Ink #printercartridges #copiertoner https://t.co/ZMkUwBv1f3
Post summary
The forum post announces a new vulnerability (CVE-2026-4682) affecting HP DeskJet 2800e printers but provides no technical specifics or evidence of exploitation.
0001047
5.0K followersView on X
CVE@CVEnew175d
Disclosure
CVE-2026-4682 Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan … https://www.cve.org/CVERecord?id=CVE-2026-4682
Post summary
The text announces a new CVE (remote code execution via buffer overflow in WSD scanning on HP DeskJet devices) without providing PoC, exploit, or patch details.
00000119
57.2K followersView on X
VulDB 🛡@vuldb175d
Disclosure
A severe vulnerability was disclosed for HP DeskJet 2800e All-in-One Printer and other products (CVE-2026-4682) https://vuldb.com/vuln/357723
Post summary
The statement announces that a severe vulnerability (CVE‑2026‑4682) has been disclosed for HP DeskJet 2800e printers, providing a link to a general vulnerability database entry but lacking detailed technical or exploit information.
0000048
2.1K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds176d
General
CVE-2026-4682 Remote Code Execution in HP DeskJet All-in-One Devices via WSD Buf... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4682 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post references CVE‑2026‑4682 as a remote code execution vulnerability in HP DeskJet All‑in‑One devices but provides no further technical detail, evidence of exploitation, or mitigation information.
0000038
4.0K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-4682

TheZDIBugs@TheZDIBugsDisclosure

Zero Day Initiative released an advisory for CVE-2026-4682, a stack‑based buffer overflow leading to RCE in an HP DeskJet 2855e model, with a CVSS of 8.8 and no indications of current exploitation.

Tonernews@tonernewsDisclo ure

The forum post announces a new vulnerability (CVE-2026-4682) affecting HP DeskJet 2800e printers but provides no technical specifics or evidence of exploitation.

CVE@CVEnewDisclosure

The text announces a new CVE (remote code execution via buffer overflow in WSD scanning on HP DeskJet devices) without providing PoC, exploit, or patch details.

VulDB 🛡@vuldbDisclosure

The statement announces that a severe vulnerability (CVE‑2026‑4682) has been disclosed for HP DeskJet 2800e printers, providing a link to a general vulnerability database entry but lacking detailed technical or exploit information.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post references CVE‑2026‑4682 as a remote code execution vulnerability in HP DeskJet All‑in‑One devices but provides no further technical detail, evidence of exploitation, or mitigation information.