Buffer overflow in HP Inc Deskjet 2800e All-In-One Printer Series
CVE-2026-4682
Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–based network scanning protocol that allows a PC to discover scanners (and MFPs) on a network and send scan jobs to them without requiring vendor specific drivers or utilities.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.003 (19.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: -0.000
Affected products
- HP Inc Deskjet 2800e All-In-One Printer Series — versions 0
- HP Inc Deskjet 4200 All-In-One Printer Series — versions 0
- HP Inc Deskjet 4200e All-In-One Printer Series — versions 0
- HP Inc Deskjet Ink Advantage 2800 All-In-One Printer Series — versions 0
- HP Inc Deskjet Ink Advantage 4200 All-In-One Printer Series — versions 0
- HP Inc Deskjet Ink Advantage Ultra 4900 Series — versions 0