---
id: CVE-2026-89084
title: |-
  HP
  has identified potential security vulnerabilities in the HP Advance software
  that may enable elevation of privilege, remote code execution, or arbitrary
  file write under certain conditions, impacting the HP Advance server hosting
  the …
summary: |-
  HP
  has identified potential security vulnerabilities in the HP Advance software
  that may enable elevation of privilege, remote code execution, or arbitrary
  file write under certain conditions, impacting the HP Advance server hosting
  the …
severity: high
cvss: 8.8
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-22
vendor: HP Inc
product: HP AC Print & Scan
affected:
  - hp_ac_print_scan < <V1R4.0.027
  - hp_output_central < <V1R4.0.029
published: '2026-09-16'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T19:34:36.657'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89084'
references:
  - url: 'https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149'
    label: hp-security-alert@hp.com
tags:
  - nvd
  - cve.org
epss: 0.00577
epssPercentile: 0.46271
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-17T16:06:15.678076Z'
cvssSource: cna
ingestedAt: '2026-09-16T20:03:30.759Z'
---

## Overview

HP
has identified potential security vulnerabilities in the HP Advance software
that may enable elevation of privilege, remote code execution, or arbitrary
file write under certain conditions, impacting the HP Advance server hosting
the software.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.