CVE & CISA-KEV Catalog

CVE-2026-1996

MEDIUM
5.3
CVSS v3
NVD

Description

Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection.

CWE-703

How to fix

Remediation Available
d9l18a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x76a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x77a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x78a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x79a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x80a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
j6x81a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
k7s37a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
k7s38a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
m9l65a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
m9l66a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
m9l67a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
m9l70a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
t0g46a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
t0g47a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
t0g48a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD
t0g49a firmwareNVD
Affected:< 001.2602aFixed in:001.2602aCVE-2026-1996derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploit Intelligence

0.27%probability of exploitation in 30 days
18thpercentile

Low risk: more likely to be exploited than 18% of all known CVEs.

References

Vendor Advisory1
Embed a live status badge for CVE-2026-1996
CVE-2026-1996 severity badge

Markdown

[![CVE-2026-1996](https://tridentstack.com/cve/badge/CVE-2026-1996.svg)](https://tridentstack.com/cve/CVE-2026-1996)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-1996"><img src="https://tridentstack.com/cve/badge/CVE-2026-1996.svg" alt="CVE-2026-1996"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-02-24.