CVE-2026-12553CWE-787

CVE-2026-12553

published August 17, 2026

CVSS
8.9
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.

The record
Technical detail
CVSS
8.9 · NONE
CVSS v4.0
8.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-08-17T23:16Z
References (1)
https://support.hp.com/us-en/document/ish_15260929-15260951-16/hpsbpi04130 · [email protected]
EPSS history
Timeline
  • 17 AUG 18:13Z
    HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write
    cvelistv5