CVE-2026-17470

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by a buffer overflow (CWE-787: Out-of-bounds Write) in the Line Printer Daemon (LPD) , allowing a remote, unauthenticated attacker to cause a denial of service . NVD assigns a CVSS 3.1 base score of 7.5 (HIGH) with high availability impact, while...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [CVE-2026-17470, CVE-2026-17469]

Summary IBM i is vulnerable to denial of service due to a buffer overflow and off-by-one write CVE-2026-17470, CVE-2026-17469 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17470 DESCRIPTION: IBM i could allow a remote attacker t...

The vulnerability of HPLIP printer drivers, related to the failure to clean input data, allows a violator to trigger a service failure.

The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of HPLIP printer drivers, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to cause a service failure.

The vulnerability of HPLIP printer drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ZeroPair

ZeroPair Zero-Authentication-Bluetooth-Exploit "Stiehl den Ausdruck, übernimm das System" root@kitploit: ███████╗███████╗██████╗ ██████╗ ╚══███╔╝██╔════╝██╔══██╗██╔═══██╗ ███╔╝ █████╗ ██████╔╝██║ ██║ ███╔╝ ██╔══╝ ██╔══██╗██║ ██║ ███████╗███████╗██║ ██║╚██████╔╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═════╝...

CVE-2026-35163

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-35163 OctoPrint: XSS in Suppressed Command Notifications

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

EUVD-2026-64043

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

CVE-2026-35163 OctoPrint: XSS in Suppressed Command Notifications

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-controlled payload.command and payload.message values in src/octoprint/static/js/app/viewmodels/terminal.js without HTML...

CVE-2026-73542

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...

CVE-2026-73542

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...

CVE-2026-73542

Multiple SEIKO EPSON printers and scanners ship with revoked root certificates, enabling a network man-in-the-middle attack to intercept transmitted communication data (CVSS 3.1: LOW, 3.7). JPCERT/CC and Epson are the sources; specific affected models/versions are not listed in the provided docum...

EUVD-2026-63198

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...

PT-2026-78886

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information...

CVE-2026-17639 Certain HP Smart Tank All in One – Potential Denial of Service

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...

CVE-2026-17639

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...

CVE-2026-17639 Certain HP Smart Tank All in One – Potential Denial of Service

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...

PT-2026-76758

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...

SUSE CVE-2026-68369

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printerread printerread uses the same variable for the requested copy size and the number of bytes actually copied to user space. copytouser returns the number of bytes not copied, so wh...