CVE-2025-11998: HP Inc Card Readers B Model

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.

Affected products

• HP Inc Card Readers B Model: from 1.0, up to and including 2.9

Published 2025-10-30. Last modified 2026-10-08.