Analysis and contextual insights are available on OpenCVE Cloud.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 31 Aug 2026 22:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Mon, 31 Aug 2026 19:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 31 Aug 2026 19:00:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmware version <=TBP1CN2612AR. An unauthenticated attacker with network access can send GET requests to multiple exposed administrative API endpoints and retrieve sensitive configuration data such as plaintext Wi‑Fi Direct credentials, unique device identity information, and other administrative security state details. When accessed through the web interface, these setting pages explicitly require administrator credentials before sensitive information is displayed. | Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs. |
| Title | CVE-2026-13753 | Certain HP DeskJet All in One – Potential Information Disclosure |
| Weaknesses | CWE-703 | |
| References |
|
Mon, 03 Aug 2026 07:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Wed, 29 Jul 2026 18:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Sat, 25 Jul 2026 23:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Thu, 23 Jul 2026 17:00:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Fri, 17 Jul 2026 11:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Wed, 15 Jul 2026 18:00:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Tue, 14 Jul 2026 00:00:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 CWE-284 |
Mon, 13 Jul 2026 04:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Wed, 08 Jul 2026 23:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Wed, 08 Jul 2026 07:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Tue, 07 Jul 2026 08:00:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Tue, 07 Jul 2026 01:15:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Hp
Hp hp 2800 Printer Series |
|
| Vendors & Products |
Hp
Hp hp 2800 Printer Series |
Mon, 06 Jul 2026 22:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Mon, 06 Jul 2026 20:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmware version <=TBP1CN2612AR. An unauthenticated attacker with network access can send GET requests to multiple exposed administrative API endpoints and retrieve sensitive configuration data such as plaintext Wi‑Fi Direct credentials, unique device identity information, and other administrative security state details. When accessed through the web interface, these setting pages explicitly require administrator credentials before sensitive information is displayed. | |
| Title | CVE-2026-13753 | |
| References |
|
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2026-08-31T21:22:06.897Z
Reserved: 2026-06-29T16:46:12.558Z
Link: CVE-2026-13753
Updated: 2026-07-06T19:33:52.015Z
Status : Awaiting Analysis
Published: 2026-07-06T19:16:55.963
Modified: 2026-10-25T20:10:00.147
Link: CVE-2026-13753
No data.
OpenCVE Enrichment
Updated: 2026-09-01T00:00:06Z
-
CWE-703
Improper Check or Handling of Exceptional Conditions