Medium severity5.3NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-1997

Description

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource.

CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device.

Affected products

Microfocus/D9l18a Firmware
cpe:2.3:o:hp:d9l18a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/D9l20a Firmware
cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/D9l21a Firmware
cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/D9l63a Firmware
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/D9l64a Firmware
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/G5j38a Firmware
cpe:2.3:o:hp:g5j38a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/G5j56a Firmware
cpe:2.3:o:hp:g5j56a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J3p65a Firmware
cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/J3p66a Firmware
cpe:2.3:o:hp:j3p66a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/J3p67a Firmware
cpe:2.3:o:hp:j3p67a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/J3p68a Firmware
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/J6x76a Firmware
cpe:2.3:o:hp:j6x76a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x77a Firmware
cpe:2.3:o:hp:j6x77a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x78a Firmware
cpe:2.3:o:hp:j6x78a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x79a Firmware
cpe:2.3:o:hp:j6x79a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x80a Firmware
cpe:2.3:o:hp:j6x80a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x81a Firmware
cpe:2.3:o:hp:j6x81a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/J6x83a Firmware
cpe:2.3:o:hp:j6x83a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s32a Firmware
cpe:2.3:o:hp:k7s32a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s37a Firmware
cpe:2.3:o:hp:k7s37a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/K7s38a Firmware
cpe:2.3:o:hp:k7s38a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/K7s39a Firmware
cpe:2.3:o:hp:k7s39a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s40a Firmware
cpe:2.3:o:hp:k7s40a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s41a Firmware
cpe:2.3:o:hp:k7s41a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s42a Firmware
cpe:2.3:o:hp:k7s42a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/K7s43a Firmware
cpe:2.3:o:hp:k7s43a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/L3t99a Firmware
cpe:2.3:o:hp:l3t99a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/M9l65a Firmware
cpe:2.3:o:hp:m9l65a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/M9l66a Firmware
cpe:2.3:o:hp:m9l66a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/M9l67a Firmware
cpe:2.3:o:hp:m9l67a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/M9l70a Firmware
cpe:2.3:o:hp:m9l70a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/T0g46a Firmware
cpe:2.3:o:hp:t0g46a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/T0g47a Firmware
cpe:2.3:o:hp:t0g47a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/T0g48a Firmware
cpe:2.3:o:hp:t0g48a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/T0g49a Firmware
cpe:2.3:o:hp:t0g49a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/T0g56a Firmware
cpe:2.3:o:hp:t0g56a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/T0g65a Firmware
cpe:2.3:o:hp:t0g65a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/T0g70a Firmware
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602b
Microfocus/T1p99a Firmware
cpe:2.3:o:hp:t1p99a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/Y0s18a Firmware
cpe:2.3:o:hp:y0s18a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/Y0s19a Firmware
cpe:2.3:o:hp:y0s19a_firmware:*:*:*:*:*:*:*:*
Range: <001.2602a
Microfocus/OfficeJet Prollm-create
HP Inc/HP OfficeJet Pro 7720 Wide Format All-in-One Printer seriesv5
Range: 0
HP Inc/HP OfficeJet Pro 7730 Wide Format All-in-One Printerv5
Range: 0
HP Inc/HP OfficeJet Pro 7740 Wide Format All-in-One Printer seriesv5
Range: 0
HP Inc/HP OfficeJet Pro 8210 Printer seriesv5
Range: 0
HP Inc/HP OfficeJet Pro 8710 All-in-One Printer seriesv5
Range: 0
HP Inc/HP OfficeJet Pro 8730 All-in-One Printerv5
Range: 0
HP Inc/HP OfficeJet Pro 8730 Mono Printer seriesv5
Range: 0
HP Inc/HP OfficeJet Pro 8740 All-in-One Printer seriesv5
Range: 0

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_14051823-14051849-16/hpsbpi04086nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000