CVE-2026-12553: HP Inc Web Jetadmin

High severity, CVSS 8.9. EPSS: 0.4% chance of exploitation in the next 30 days.

HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.

Affected products

• HP Inc Web Jetadmin: before 10.6 (fixed in 10.6)

Published 2026-08-17. Last modified 2026-08-31.