HP d9l20a Firmware vulnerabilities

6 CVEs affecting HP d9l20a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1997, published 2026-02-10.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2741, published 2018-01-23. Critical severity, CVSS 9.8. EPSS: 84.6% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute…
• CVE-2018-5924, published 2018-08-13. Critical severity, CVSS 9.8. EPSS: 12.2% chance of exploitation in the next 30 days. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code…
• CVE-2018-5925, published 2018-08-13. High severity, CVSS 7.8. EPSS: 10.9% chance of exploitation in the next 30 days. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code…
• CVE-2022-28721, published 2022-09-26. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Certain HP Print Products are potentially vulnerable to Remote Code Execution.
• CVE-2022-28722, published 2022-09-26. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Certain HP Print Products are potentially vulnerable to Buffer Overflow.
• CVE-2026-1997, published 2026-02-10. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is…