HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084) · ZeroHour

Full Disclosurepublished Sep 22, 18:32 UTC (4d ago)ingested Sep 22, 19:30 UTC

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

highVulnerabilityimportance 72CVE-2026-89082 CVE-2026-89083 CVE-2026-89084

AI summary · grok-4.7

HP Advance and Output Central have unauthenticated SYSTEM RCE, an auth bypass, and arbitrary file write flaws.

A Full Disclosure post reports three vulnerabilities in HP Advance and HP Output Central, with HP AC Print & Scan also named in HP's update table. CVE-2026-89082, CVE-2026-89083, and CVE-2026-89084 cover unauthenticated remote code execution as SYSTEM, an authorization bypass, and arbitrary file write or delete. The excerpt does not say the flaws are being exploited.

Unauthenticated remote code execution as SYSTEM
Authorization bypass plus arbitrary file write and delete
CVE-2026-89082, CVE-2026-89083, and CVE-2026-89084
Affects HP Advance, Output Central, and AC Print & Scan

Read the original

VendorsHP

ProductsHP Advance HP Output Central HP AC Print & Scan

Tags#hp #hp-advance #output-central #rce #auth-bypass #cve-2026-89082 #cve-2026-89083 #cve-2026-89084

Vulnerabilities mentionedAll →

CVE-2026-890829.3—
Critical unauthenticated code injection in HP Advance server enables RCE and file writes
published 10d ago· HP Inc. HP Advance (server component)
CVE-2026-890839.3—
Unauthenticated code-injection RCE and arbitrary file write in HP Advance server
published 10d ago· HP Advance (server hosting the software, on-premises deployment)+1 related

Full article

Posted by Joe via Fulldisclosure on Sep 22 HP Advance / HP Output Central Unauthenticated SYSTEM RCE, authorization bypass, and arbitrary file write/delete CVE-2026-89082, CVE-2026-89083, CVE-2026-89084 ================================================================ SUMMARY ================================================================ Vendor: HP Inc. Product family named by HP: HP Advance Products in HP's update table: HP AC Print & Scan; HP Output Central Components:...

This source does not provide full text. Read it at seclists.org.

Critical unauthenticated code injection in HP Advance server enables RCE and file writes

HP has disclosed code injection flaws (CWE-94) in HP Advance server software that, under certain conditions, can lead to elevation of privilege, remote code execution, or arbitrary file write on the server hosting HP Advance. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) indicates the issues are reachable over the network without authentication or user interaction, with high impact to the confidentiality, integrity, and availability of the server. A successful attacker could gain code execution or write arbitrary files on the HP Advance server, which typically anchors an organization's mobile and managed printing workflows. Any organization operating an HP Advance server is potentially affected. As of this analysis the flaws are not listed in CISA's KEV catalog and no public proof-of-concept is known.

Do: Consult HP's security bulletin for CVE-2026-89082 and upgrade HP Advance server to the fixed release HP recommends, since the advisory data here does not state version numbers. In the meantime, limit network exposure of the HP Advance server to trusted internal segments or VPN access, as the flaws are exploitable remotely without authentication. Verify whether your Advance server is internet-reachable and monitor HP release notes for patched builds.

9.3

—

HP Inc. HP Advance (server component)

moderatelikely on the order of 1,000-10,000 enterprise HP Advance server deployments worldwide (estimate)

10d ago

+1 related CVE

Unauthenticated code-injection RCE and arbitrary file write in HP Advance server

HP has disclosed code-injection flaws (CWE-94) in HP Advance server software that, under certain conditions, can lead to elevation of privilege, remote code execution, or arbitrary file writes on the server hosting the product. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates the flaws are triggerable remotely over a network with low attack complexity, no privileges required, and no user interaction. A successful attacker could gain highly confidential read access on the server and achieve high confidentiality and integrity impact on subsequent (connected) systems, enabling privilege escalation, code execution, or malicious file placement. Any organization running HP Advance, an enterprise print/output-management platform typically hosted on an on-premises server, is affected. No public proof-of-concept is known and the issue is not listed in CISA's KEV, so exploitation has not been confirmed.

Do: Upgrade HP Advance to the fixed release identified in the HP security bulletin, since the advisory data available here does not specify affected or fixed version numbers. Restrict network access to the Advance server (internal or VPN only, not directly internet-exposed) and check server logs for unauthenticated requests or unexpected file writes. Given the high confidentiality and subsequent-system impact ratings, also review accounts and adjacent systems reachable from the Advance host after patching.

9.3

group max

—

HP Advance (server hosting the software, on-premises deployment)