{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-13753 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2026-13753 yet. Limit exposure of the affected software until one is available.","what":"CVE-2026-13753 is a high-severity vulnerability in HP DJ 4227e NA OOVWhite Printer, published on 6 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-13753 and fix it if it is affected.\n\nWhat it is: CVE-2026-13753 is a high-severity vulnerability in HP DJ 4227e NA OOVWhite Printer, published on 6 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-13753 in the wild and no public exploit code.\n\nAffected product: HP DJ 4227e NA OOVWhite Printer. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-13753/ (Markdown: https://insights.sbomify.com/CVE-2026-13753/index.md)","id":"CVE-2026-13753","markdown":"https://insights.sbomify.com/CVE-2026-13753/index.md","name":"CVE-2026-13753","record":{"aliases":["GHSA-mmv4-jxh6-w9r5"],"analysis":{"component_type":"iot_embedded","fix_type":"patch","impacts":["data_read"],"network_reachable":"yes","non_default_config":false,"product_category":"HP DeskJet printer","requires_auth":"none","summary":"Unauthenticated attackers can access sensitive information via exposed APIs on HP DeskJet All-in-One printers.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"certcc","cpe":[],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"cwes":[{"id":"CWE-703","name":"Improper Check or Handling of Exceptional Conditions"}],"description":"Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":"2026-09-01","github_poc":1,"max_poc_stars":1,"metasploit":0,"nuclei":0,"refs":[{"date":"2026-09-01T18:27:30Z","kind":"github_poc","ref":"https://github.com/typedefabcd1234ntd/CVE-2026-13753-poc","stars":1,"title":"Poc of CVE-2026-13753"}],"tier":"poc_unverified"},"has_fix":null,"headline":"Certain HP DeskJet All in One – Potential Information Disclosure","id":"CVE-2026-13753","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"information_disclosure","year":"2026"},"n_packages":0,"n_references":1,"next":{"headline":"Tickera \u003c= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter","id":"CVE-2026-13754"},"packages":[],"prev":{"headline":"Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution.","id":"CVE-2026-13752"},"products":["HP DJ 4227e NA OOVWhite Printer","HP DeskJet 2810 Printer","HP DeskJet 2810e AIO Printer","HP DeskJet 2820 AIO Printer","HP DeskJet 2820 All-in-One Printer","HP DeskJet 2820e AIO Printer","HP DeskJet 2821 AIO Printer","HP DeskJet 2821e AIO Printer","HP DeskJet 2821e All-in-One","HP DeskJet 2822 AIO Printer","HP DeskJet 2822e AIO Printer","HP DeskJet 2823 AIO Printer","HP DeskJet 2823e AIO Printer","HP DeskJet 2825e All-in-One Printer","HP DeskJet 2827e All-in-One Printer","HP DeskJet 2828 AIO Printer","HP DeskJet 2829 AIO Printer","HP DeskJet 2842e AIO Printer","HP DeskJet 2842e All-in-One","HP DeskJet 2842e All-in-One Printer","HP DeskJet 2852e All-in-One Printer","HP DeskJet 2855e AIO Printer","HP DeskJet 4210e All-in-One","HP DeskJet 4220 All-in-One Printer","HP DeskJet 4220e All-in-One Printer","HP DeskJet 4221 All-in-One Printer","HP DeskJet 4222e All-in-One Printer","HP DeskJet 4227 All-in-One Printer","HP DeskJet 4228 All-in-One Printer","HP DeskJet 4230e All-in-One Printer","HP DeskJet 4252e All-in-One","HP DeskJet 4255e All-in-One","HP DeskJet 4258e All-in-One","HP DeskJet Ink Advantage 2874 Printer","HP DeskJet Ink Advantage 2875 All-in-One","HP DeskJet Ink Advantage 2875 Printer","HP DeskJet Ink Advantage 2876 Printer","HP DeskJet Ink Advantage 2877 Printer","HP DeskJet Ink Advantage 2878 Printer","HP DeskJet Ink Advantage 2879 Printer","HP DeskJet Ink Advantage 4275 Printer","HP DeskJet Ink Advantage 4276 All-in-One Printer","HP DeskJet Ink Advantage 4278 All-in-One Printer","HP DeskJet Ink Advantage 4928 All-in-One Printer","HP DeskJet Ink Advantage 4929 All-in-One Printer","HP DeskJet Ink Advantage 4978 All-in-One Printer","HP DeskJet Ink Advantage Ultra 4925","HP DeskJet Ink Advantage Ultra 4926","HP DeskJet Ink Advantage Ultra 4927","HP DeskJet Ink Advantage Ultra 4928","HP DeskJet Ink Advantage Ultra 4929","HP DeskJet Ink Advantage Ultra 4975","HP DeskJet Ink Advantage Ultra 4976","HP DeskJet Ink Advantage Ultra 4977","HP DeskJet Plus 4220 All-in-One Printer"],"published":"2026-07-06","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"open","licence":"CC0","name":"PoC-in-GitHub"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-08-31","vendors":["HP Inc"]},"summary":"Unauthenticated attackers can access sensitive information via exposed APIs on HP DeskJet All-in-One printers.","url":"https://insights.sbomify.com/CVE-2026-13753/"}