Vulnerability Management HP DeskJet 2800 series printers vulnerable to sensitive data exposure July 9, 2026 Share By SC Staff (Adobe Stock) HP DeskJet 2800 series printers are susceptible to a newly identified vulnerability, CVE-2026-13753, which allows unauthorized access to sensitive configuration data over a local network. The flaw affects devices running specific firmware versions, and no immediate fix is available, as reported by Cyber Insider. The vulnerability, disclosed by the CERT Coordination Center (CERT/CC), stems from a lack of authorization checks in the printer's embedded web server. This allows unauthenticated requests to backend API endpoints that should be protected. Attackers on the same network can exploit this to retrieve critical information, including Wi-Fi Direct credentials, SNMP configuration, serial numbers, and administrative security settings. This data could be leveraged for unauthorized network access, reconnaissance, or further attacks. CERT/CC was unable to coordinate the disclosure with HP, meaning a firmware update is not yet available. Until a patch is released, users are advised to limit access to the printer's web interface, place it on an isolated network, disable Wi-Fi Direct and SNMP if not necessary, and use firewall rules to restrict access. Disabling unused discovery and cloud services is also recommended. Source: Cyber Insider SC Staff Related Vulnerability Management Critical Gitea flaw allows authentication bypass via single HTTP header SC Staff July 9, 2026 The vulnerability stems from an insecure default configuration in Gitea's official Docker images (versions prior to 1.26.3) where the "REVERSE_PROXY_TRUSTED_PROXIES" setting is set to "*". Vulnerability Management BeyondTrust warns of critical flaws in remote access software SC Staff July 9, 2026 The vulnerabilities, tracked as CVE-2026-40138 and CVE-2026-40139, affect specific versions of BeyondTrust's RS and PRA software. Vulnerability Management Microsoft releases patch for Defender zero-day vulnerability RoguePlanet SC Staff July 9, 2026 The vulnerability, tracked as CVE-2026-50656, was revealed by a security researcher using the handle "Nightmare Eclipse." Related Events Cybercast Why Mythos is the cybersecurity crisis we need Wed Jul 22 Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bug Buffer Overflow Disassembly You can skip this ad in 5 seconds