Vulnerability · Published Aug 17, 2026 · Assigned by hp
CVE-2026-12553HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write
High 8.9
In plain English
A high-severity out-of-bounds write in Web Jetadmin from HP Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 4.0)8.9High
Exploit odds (30 days)0.4%top 62.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HP Inc. | Web Jetadmin | 0 – before <10.6 |
Weakness: CWE-787 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P