CVE-2026-1996: HP d9l18a Firmware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection.

Affected products

• HP d9l18a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x76a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x77a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x78a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x79a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x80a Firmware: before 001.2602a (fixed in 001.2602a)
• HP j6x81a Firmware: before 001.2602a (fixed in 001.2602a)
• HP k7s37a Firmware: before 001.2602a (fixed in 001.2602a)
• HP k7s38a Firmware: before 001.2602a (fixed in 001.2602a)
• HP m9l65a Firmware: before 001.2602a (fixed in 001.2602a)
• HP m9l66a Firmware: before 001.2602a (fixed in 001.2602a)
• HP m9l67a Firmware: before 001.2602a (fixed in 001.2602a)
• HP m9l70a Firmware: before 001.2602a (fixed in 001.2602a)
• HP t0g46a Firmware: before 001.2602a (fixed in 001.2602a)
• HP t0g47a Firmware: before 001.2602a (fixed in 001.2602a)
• HP t0g48a Firmware: before 001.2602a (fixed in 001.2602a)
• HP t0g49a Firmware: before 001.2602a (fixed in 001.2602a)

Published 2026-02-10. Last modified 2026-06-17.