# Hp vulnerabilities Source: https://junglewise.ai/threats/vendors/hp Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/hp.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 92 vulnerabilities in Hp: 0 in the last 7 days and 27 in the last 90 days, 17 of them critical and 0 exploited in the wild. The most recent, CVE-2026-39431, was published on 4 November 2026. 3 vulnerabilities in the last four weeks, down 84% on the four before (19). 0 critical against 11. 5 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 27 - All time: 92 (17 critical, 0 exploited in the wild) ## About Hp A multinational information technology company that provides personal computing, imaging, and printing products. ## Latest Hp vulnerabilities - [CVE-2026-39431: HP Poly EagleEye Cube USB command injection via API](https://junglewise.ai/threats/cve-2026-39431-on-hp-poly-eagleeye-cube-usb-1-3-1-001267-devices-one-of-the-api) (info, published 4 Nov 2026) - [CVE-2026-39430: HP Poly EagleEye Cube USB authentication bypass in administrator session management](https://junglewise.ai/threats/cve-2026-39430-on-hp-poly-eagleeye-cube-usb-1-3-1-001267-devices-the) (info, published 4 Nov 2026) - [CVE-2026-91093: HP One Agent privilege escalation and code execution](https://junglewise.ai/threats/cve-2026-91093-a-potential-security-vulnerability-has-been-identified-in-hp-one) (info, published 23 Oct 2026) - [CVE-2026-79808: HP ClearPass Policy Manager OnGuard buffer overflow](https://junglewise.ai/threats/cve-2026-79808-a-buffer-overflow-vulnerability-exists-in-the-onguard-agent-of) (high, CVSS 7.8, published 6 Oct 2026) - [CVE-2026-76744: HP AOS-S buffer overflow in interface](https://junglewise.ai/threats/cve-2026-76744-buffer-overflow-vulnerabilities-exist-in-the-affected-interface) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76742: HP AOS-S authentication bypass in web management interface](https://junglewise.ai/threats/cve-2026-76742-authentication-bypass-vulnerabilities-exist-in-the-web-management) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-84900: HP ThinPro unspecified security vulnerabilities](https://junglewise.ai/threats/cve-2026-84900-previous-versions-of-hp-thinpro-prior-to-hp-thinpro-8-1-sp10) (info, published 5 Oct 2026) - [CVE-2026-76712: HP Analytics and Location Engine unauthorized access and denial of service](https://junglewise.ai/threats/cve-2026-76712-a-vulnerability-exists-in-the-analytics-and-location-engine-ale) (high, CVSS 7.3, published 22 Sep 2026) - [CVE-2026-19915: HP Support Assistant privilege escalation due to insufficient access controls](https://junglewise.ai/threats/cve-2026-19915-a-potential-security-vulnerability-has-been-identified-in-the-hp) (info, published 22 Sep 2026) - [CVE-2026-89084: HP Advance elevation of privilege and remote code execution](https://junglewise.ai/threats/cve-2026-89084-hp-advance-elevation-of-privilege-and-remote-code-execution) (info, published 16 Sep 2026) - [CVE-2026-89083: HP Advance server privilege escalation and code execution](https://junglewise.ai/threats/cve-2026-89083-hp-advance-server-privilege-escalation-and-code-execution) (info, published 16 Sep 2026) - [CVE-2026-89082: HP Advance elevation of privilege and remote code execution](https://junglewise.ai/threats/cve-2026-89082-hp-advance-elevation-of-privilege-and-remote-code-execution) (info, published 16 Sep 2026) - [CVE-2026-91105: HP HPLIP multiple vulnerabilities leading to remote code execution](https://junglewise.ai/threats/cve-2026-91105-hp-hplip-multiple-vulnerabilities-leading-to-remote-code) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91104: HP HPLIP multiple remote code execution and privilege escalation vulnerabilities](https://junglewise.ai/threats/cve-2026-91104-hp-hplip-multiple-remote-code-execution-and-privilege-escalation) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91103: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91103-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91102: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91102-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91101: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91101-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91100: HP HPLIP remote code execution and privilege escalation](https://junglewise.ai/threats/cve-2026-91100-hp-hplip-remote-code-execution-and-privilege-escalation) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91099: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91099-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91098: HP HPLIP multiple vulnerabilities enabling RCE and privilege escalation](https://junglewise.ai/threats/cve-2026-91098-hp-hplip-multiple-vulnerabilities-enabling-rce-and-privilege) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91097: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91097-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-76680: HP EdgeConnect SD-WAN Orchestrator server-side request forgery in API](https://junglewise.ai/threats/cve-2026-76680-vulnerabilities-in-the-api-of-edgeconnect-sd-wan-orchestrator) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-15431: HP Support Assistant privilege escalation](https://junglewise.ai/threats/cve-2026-15431-hp-support-assistant-privilege-escalation) (info, published 3 Sep 2026) - [CVE-2026-82346: HP ImageDiags privilege escalation due to insufficient access controls](https://junglewise.ai/threats/cve-2026-82346-hp-imagediags-privilege-escalation-due-to-insufficient-access) (info, published 31 Aug 2026) - [CVE-2026-75946: HP OMEN Gaming Hub privilege escalation due to insufficient access controls](https://junglewise.ai/threats/cve-2026-75946-hp-omen-gaming-hub-privilege-escalation-due-to-insufficient) (info, published 21 Aug 2026) ## Most severe Hp vulnerabilities - [CVE-1999-0210: Sun Solaris automountd command injection via shell metacharacters](https://junglewise.ai/threats/cve-1999-0210-sun-solaris-automountd-command-injection-via-shell-metacharacters) (critical, CVSS 10, published 26 Nov 1997) - [CVE-1999-0046: Multiple Vendors rlogin buffer overflow via TERM environment variable](https://junglewise.ai/threats/cve-1999-0046-multiple-vendors-rlogin-buffer-overflow-via-term-environment) (critical, CVSS 10, published 6 Feb 1997) - [CVE-1999-1160: HP HP-UX privilege escalation in ftpd and kftpd](https://junglewise.ai/threats/cve-1999-1160-hp-hp-ux-privilege-escalation-in-ftpd-and-kftpd) (critical, CVSS 10, published 2 Feb 1997) - [CVE-1999-0246: HP Remote Watch remote root access vulnerability](https://junglewise.ai/threats/cve-1999-0246-hp-remote-watch-remote-root-access-vulnerability) (critical, CVSS 10, published 1 Oct 1996) - [CVE-1999-1493: Hewlett Packard Apollo Domain OS privilege escalation in crp](https://junglewise.ai/threats/cve-1999-1493-hewlett-packard-apollo-domain-os-privilege-escalation-in-crp) (critical, CVSS 10, published 18 Dec 1991) - [CVE-2026-91105: HP HPLIP multiple vulnerabilities leading to remote code execution](https://junglewise.ai/threats/cve-2026-91105-hp-hplip-multiple-vulnerabilities-leading-to-remote-code) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91098: HP HPLIP multiple vulnerabilities enabling RCE and privilege escalation](https://junglewise.ai/threats/cve-2026-91098-hp-hplip-multiple-vulnerabilities-enabling-rce-and-privilege) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91097: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91097-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91099: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91099-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-91103: HP HPLIP multiple vulnerabilities enabling remote code execution](https://junglewise.ai/threats/cve-2026-91103-hp-hplip-multiple-vulnerabilities-enabling-remote-code-execution) (critical, CVSS 9.8, published 16 Sep 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 84% on the four before (19). 0 critical against 11. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 13 | 9 | 0 | | 21 Sep 2026 | 2 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 4 | 2 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Hp technologies - [HP-UX](https://junglewise.ai/threats/technologies/hp-ux): 40 vulnerabilities - [HPLIP](https://junglewise.ai/threats/technologies/hplip): 10 vulnerabilities - [Hp Linux Imaging](https://junglewise.ai/threats/technologies/linux-imaging): 9 vulnerabilities - [Hp Printing](https://junglewise.ai/threats/technologies/printing): 9 vulnerabilities - [Hp Advance](https://junglewise.ai/threats/technologies/advance): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hp vulnerabilities", https://junglewise.ai/threats/vendors/hp, 12 November 2026.