HP Smart Tank All-in-One Printer DoS Vulnerability Advisory (CVE-2026-17639)

Vulnerability Overview Vulnerability Name: Certain HP Smart Tank All in One - Potential Denial of Service CVE ID: CVE-2026-17639 CVSS Score: 6.9 Severity: Medium Release Date: August 17, 2026 Last Updated: August 17, 2026 Category: Print Potential Security Impact: Denial of Service Affected Products Affected Products: Certain HP Smart Tank All in One printers Vulnerability Description: Certain HP Smart Tank All in One printers may be vulnerable to denial-of-service conditions, allowing unauthenticated attackers to render the device unavailable by sending multiple concurrent HTTP requests. Remediation Update Firmware: Update the printer firmware to resolve this vulnerability. Obtain Firmware Update: Visit HP Software and Driver Downloads and search for your printer model to obtain the updated firmware version. Additional Information Third-Party Security Patch: Third-party security patches should be installed on systems running HP software products in accordance with the customer's patch management policy. Support: For questions regarding the implementation of the recommendations in this security bulletin, visit http://www.hp.com/go/contacthp to learn about your HP support options. Reporting: To report a potential security vulnerability in any HP support product, send an email to hp-security-alert@hp.com. Security Bulletin Archive: To view published security bulletins, visit https://support.hp.com/security-bulletins. Legal Information System management and security procedures must be regularly reviewed to maintain system integrity. HP continuously reviews and enhances the security features of its software products to provide customers with currently secure solutions. HP widely distributes this security bulletin to bring important security information about affected HP products to users. HP recommends that all users determine the applicability of this information to their own circumstances and take appropriate action. HP does not guarantee that this information is accurate or complete for all user circumstances; therefore, HP is not responsible for any damages resulting from the use by or ignoring of the information provided in this security bulletin. To the fullest extent permitted by law, HP disclaims all express or implied warranties, including those of merchantability and fitness for a particular purpose. HP Inc. ("HP") assumes no responsibility for technical or editorial errors or omissions contained herein. The information is provided "as is" without warranty of any kind, either express or implied. To the extent permitted by law, HP and its affiliates, subcontractors, or suppliers shall not be liable for any indirect, special, or consequential damages (including costs of downtime, loss of profits, damages associated with the procurement of substitute products or services, loss of data, or damages associated with software restoration). The information in this document may be changed without notice. "HP Inc.", "HP", and the HP product names referenced are trademarks of HP Inc. or its affiliates in the U.S. and/or other countries. Other product and company names may be trademarks of their respective owners. Additional Support Options Try our automated tools or diagnostics Ask questions on our HP Support Community page Contact our support agents Knowledge Base Search Enter a topic to search our knowledge base Footer Information About Us How to Buy Support HP Partners Stay Connected --- Note: POC code or exploit code is not included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

HP Smart Tank All-in-One Printer DoS Vulnerability Advisory (CVE-2026-17639)