CVE-2026-42626: Medium severity HP HP ENVY 5000 series vulnerability
HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetDirect/RAW printing). An unauthenticated remote attacker on the same network can establish a persistent connection to port 9100 and send keep-alive packets, causing the printer's session threads to remain locked in a waiting state. The firmware lacks connection timeouts and concurrent session limits, resulting in a persistent Denial of Service (DoS) that renders the printer unresponsive to all user commands and print jobs. Physical intervention (manual restart) is required to restore functionality, and the attack can be immediately re-initiated.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42626?
The severity of CVE-2026-42626 is classified as medium with a CVSS score of 5.9.
How do I fix CVE-2026-42626?
To mitigate CVE-2026-42626, update the printer firmware to the latest version provided by HP.
What impacts does CVE-2026-42626 have on HP ENVY 5000 series printers?
CVE-2026-42626 allows an unauthenticated attacker on the same network to cause a denial of service by establishing persistent connections on port 9100.
Who is affected by CVE-2026-42626?
The vulnerability affects all HP ENVY 5000 series printers running the firmware version VERBASPP1N003.2237A.00.
Can CVE-2026-42626 be exploited remotely?
Yes, CVE-2026-42626 can be exploited remotely by an attacker on the same network.