← Security Alerts

CVE-2026-13753

HP Inc. · published 2026-07-06

Source record Collected from the National Vulnerability Database (NVD)

Description

Description by HP Inc. via the CVE Program.

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.

Status at the source

Affected products, as the source lists them

VendorProductVersions
HP IncHP DeskJet 2820 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2823 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2822 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2829 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2821 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2820 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2828 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2823 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2821 AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2810 Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2820e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2842e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 2820e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2821e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 2810e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2821e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2823e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2822e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2823e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2842e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2827e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2825e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DJ 4227e NA OOVWhite Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2842e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2855e AIO Printer0 – before <001.2629A: affected
HP IncHP DeskJet 2852e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2875 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2874 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2875 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2876 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2878 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2875 All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2875 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2879 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2878 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2876 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2877 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 2879 Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49250 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49270 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4928 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49250 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49260 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49770 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49290 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4929 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49280 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4978 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49750 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage Ultra 49760 – before <001.2629A: affected
HP IncHP DeskJet Plus 4220 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4221 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4227 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4228 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4220 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4252e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 4258e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 4255e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 4258e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet 4220e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4222e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4230e All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet 4210e All-in-One0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4276 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4278 All-in-One Printer0 – before <001.2629A: affected
HP IncHP DeskJet Ink Advantage 4275 Printer0 – before <001.2629A: affected

DeSpy has not checked any unit, hardware revision or firmware. A product missing here is not a statement that it is unaffected.

Scores, as their sources published them

DeSpy does not score records. These are the sources' own values.

Weaknesses

CWE-703

Sources

References the source lists

Source dates: published 2026-07-06, last changed 2026-08-31. DeSpy's copy of this version is dated 2026-09-28.

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE records: Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

CISA's Known Exploited Vulnerabilities catalog and CISA Vulnrichment data are CC0 1.0. CISA advisories are shown with the TLP label their document carries. No endorsement by CISA, DHS, NIST or MITRE is stated or implied.

Scope, sources and licences →