ZDI-CAN-28261: ZDI-26-063: (Pwn2Own) Lexmark CX532adwe libesffls Directory Traversal Remote Code Execution Vulnerability

Published Feb 5, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65077.

Affected Software

1 affected component

Lexmark CX532adwe

Event History

Feb 5, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28261?

The severity of ZDI-CAN-28261 is critical due to the potential for remote code execution.

How do I fix ZDI-CAN-28261?

To fix ZDI-CAN-28261, update the Lexmark CX532adwe printer firmware to the latest version provided by the manufacturer.

What are the risks associated with ZDI-CAN-28261?

The risks associated with ZDI-CAN-28261 include unauthorized access and control of the printer by attackers.

Who is affected by ZDI-CAN-28261?

The ZDI-CAN-28261 vulnerability affects installations of Lexmark CX532adwe printers.

Is authentication required to exploit ZDI-CAN-28261?

No, authentication is not required to exploit the ZDI-CAN-28261 vulnerability.