Critical severity9.8NVD Advisory· Published Feb 14, 2025· Updated Jun 17, 2026

CVE-2025-26507

Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

Affected products

Microfocus/Futuresmart 3
cpe:2.3:o:hp:futuresmart_3:*:*:*:*:*:*:*:*
Range: <2309118_002276
Microfocus/Futuresmart 4
cpe:2.3:o:hp:futuresmart_4:*:*:*:*:*:*:*:*
Range: <2411278_068111
Microfocus/Futuresmart 5
cpe:2.3:o:hp:futuresmart_5:*:*:*:*:*:*:*:*
Range: <2508402_000067
Microfocus/LaserJet Prollm-create
Microfocus/LaserJet Managed Printersllm-create
Microfocus/LaserJet Enterprisellm-create
HP, Inc./Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printersv5
Range: See HP security bulletin reference for affected versions

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000