← Security Alerts

CVE-2026-17639

HP Inc. · published 2026-08-17

Source record Collected from the National Vulnerability Database (NVD)

Description

Description by HP Inc. via the CVE Program.

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests.

Status at the source

Affected products, as the source lists them

VendorProductVersions
HP IncHP Smart Tank 5101 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5001 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5003 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5100 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5104 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5109 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5102 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5105 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5106 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5107 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5108 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5115 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 580 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 585 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 584 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 597 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 581 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 580 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 581 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 585 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 582 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 583 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 589 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 580 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 588 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 591 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 592 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 593 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 595 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 596 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 598 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 599 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5100 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5000 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 5103 All-in-One Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 210 Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 218 Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 215 Printer0 – before <001.2630C: affected
HP IncHP Smart Tank 520 All-in-One Printer0 – before 001.2622C or later: affected
HP IncHP Smart Tank 525 All-in-One Printer0 – before 001.2622C or later: affected
HP IncHP Smart Tank 521 All-in-One Printer0 – before 001.2622C or later: affected
HP IncHP Smart Tank 523 All-in-One Printer0 – before 001.2622C or later: affected
HP IncHP Smart Tank 524 All-in-One Printer0 – before 001.2622C or later: affected
HP IncHP Smart Tank 529 All-in-One Printer0 – before 001.2622C or later: affected

DeSpy has not checked any unit, hardware revision or firmware. A product missing here is not a statement that it is unaffected.

Scores, as their sources published them

DeSpy does not score records. These are the sources' own values.

Weaknesses

CWE-400

Sources

References the source lists

Source dates: published 2026-08-17, last changed 2026-08-31. DeSpy's copy of this version is dated 2026-09-28.

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE records: Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

CISA's Known Exploited Vulnerabilities catalog and CISA Vulnrichment data are CC0 1.0. CISA advisories are shown with the TLP label their document carries. No endorsement by CISA, DHS, NIST or MITRE is stated or implied.

Scope, sources and licences →