# CVE-2026-13753

## Summary

- **CVE ID:** CVE-2026-13753
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- **CWE:** CWE-703
- **Published:** Jul 6, 2026
- **Last Modified:** Aug 31, 2026

## Description

A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmware version <=TBP1CN2612AR. An unauthenticated attacker with network access can send GET requests to multiple exposed administrative API endpoints and retrieve sensitive configuration data such as plaintext Wi‑Fi Direct credentials, unique device identity information, and other administrative security state details. When accessed through the web interface, these setting pages explicitly require administrator credentials before sensitive information is displayed.

## Affected Products

- HP Inc. — HP 2800 Printer Series (0)
- HP Inc — HP DeskJet 2820 AIO Printer (0)
- HP Inc — HP DeskJet 2823 AIO Printer (0)
- HP Inc — HP DeskJet 2822 AIO Printer (0)
- HP Inc — HP DeskJet 2829 AIO Printer (0)
- HP Inc — HP DeskJet 2821 AIO Printer (0)
- HP Inc — HP DeskJet 2820 All-in-One Printer (0)
- HP Inc — HP DeskJet 2828 AIO Printer (0)
- HP Inc — HP DeskJet 2810 Printer (0)
- HP Inc — HP DeskJet 2820e AIO Printer (0)
- HP Inc — HP DeskJet 2842e All-in-One (0)
- HP Inc — HP DeskJet 2821e All-in-One (0)
- HP Inc — HP DeskJet 2810e AIO Printer (0)
- HP Inc — HP DeskJet 2821e AIO Printer (0)
- HP Inc — HP DeskJet 2823e AIO Printer (0)
- HP Inc — HP DeskJet 2822e AIO Printer (0)
- HP Inc — HP DeskJet 2842e All-in-One Printer (0)
- HP Inc — HP DeskJet 2827e All-in-One Printer (0)
- HP Inc — HP DeskJet 2825e All-in-One Printer (0)
- HP Inc — HP DJ 4227e NA OOVWhite Printer (0)
- HP Inc — HP DeskJet 2842e AIO Printer (0)
- HP Inc — HP DeskJet 2855e AIO Printer (0)
- HP Inc — HP DeskJet 2852e All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2875 Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2874 Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2876 Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2878 Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2875 All-in-One (0)
- HP Inc — HP DeskJet Ink Advantage 2879 Printer (0)
- HP Inc — HP DeskJet Ink Advantage 2877 Printer (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4925 (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4927 (0)
- HP Inc — HP DeskJet Ink Advantage 4928 All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4926 (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4977 (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4929 (0)
- HP Inc — HP DeskJet Ink Advantage 4929 All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4928 (0)
- HP Inc — HP DeskJet Ink Advantage 4978 All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4975 (0)
- HP Inc — HP DeskJet Ink Advantage Ultra 4976 (0)
- HP Inc — HP DeskJet Plus 4220 All-in-One Printer (0)
- HP Inc — HP DeskJet 4221 All-in-One Printer (0)
- HP Inc — HP DeskJet 4227 All-in-One Printer (0)
- HP Inc — HP DeskJet 4228 All-in-One Printer (0)
- HP Inc — HP DeskJet 4220 All-in-One Printer (0)
- HP Inc — HP DeskJet 4252e All-in-One (0)
- HP Inc — HP DeskJet 4258e All-in-One (0)
- HP Inc — HP DeskJet 4255e All-in-One (0)
- HP Inc — HP DeskJet 4220e All-in-One Printer (0)
- HP Inc — HP DeskJet 4222e All-in-One Printer (0)
- HP Inc — HP DeskJet 4230e All-in-One Printer (0)
- HP Inc — HP DeskJet 4210e All-in-One (0)
- HP Inc — HP DeskJet Ink Advantage 4276 All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage 4278 All-in-One Printer (0)
- HP Inc — HP DeskJet Ink Advantage 4275 Printer (0)

## References

- [CNA](https://kb.cert.org/vuls/id/828543)
- [CVE](https://www.kb.cert.org/vuls/id/828543)
- [CNA](https://support.hp.com/us-en/document/ish_15558834-15558856-16/hpsbpi04148)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.46%
- **EPSS Percentile:** 38.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._