CVE Catalog
CVE-2026-12553
HighCVSS 8.9Exploitation Probability (EPSS)
Low risk0.31%
24th percentile - higher than 24% of all known CVEs
Summary
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.
Risk Assessment
The risk includes unauthorized access to system files and potential privilege escalation, which could lead to full system compromise.
Recommendation
It is recommended to apply patches provided by HP and restrict the installation and execution of WJA to trusted environments only.
Original NVD description (English source)
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.