ZDI-CAN-28328: ZDI-26-065: (Pwn2Own) Lexmark CX532adwe usecmap Type Confusion Remote Code Execution Vulnerability

Published Feb 5, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65080.

Affected Software

1 affected component

Lexmark CX532adwe

Event History

Feb 5, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28328?

ZDI-CAN-28328 is considered a critical vulnerability due to its ability to allow remote code execution without authentication.

How do I fix ZDI-CAN-28328?

To fix ZDI-CAN-28328, update the firmware of the Lexmark CX532adwe printer to the latest version provided by Lexmark.

Who is affected by ZDI-CAN-28328?

ZDI-CAN-28328 affects installations of Lexmark CX532adwe printers that are network-adjacent.

What types of attacks can leverage ZDI-CAN-28328?

ZDI-CAN-28328 can be exploited by attackers to execute arbitrary code remotely on the affected printers.

Is authentication required to exploit ZDI-CAN-28328?

No, authentication is not required to exploit ZDI-CAN-28328, making it particularly dangerous.