CVE-2026-12556: CWE-319 Cleartext transmission of sensitive information in HP Inc HP Easy Start for macOS

This vulnerability (CVE-2026-12556) affects HP Easy Start for macOS and is categorized under CWE-319, indicating cleartext transmission of sensitive information. The vulnerability potentially allows escalation of privilege due to insecure data transmission. The CVSS 4.0 base score is 7.7, reflecting a high severity with network attack vector, low attack complexity, partial attack and user interaction requirements, and high impact on confidentiality, integrity, and availability. HP has announced updates to mitigate these vulnerabilities, but no specific patch versions or remediation details are provided in the available data.

The vulnerability could allow an attacker to intercept sensitive information transmitted in cleartext, potentially leading to escalation of privilege within the affected system. This can compromise confidentiality, integrity, and availability of the system components related to HP Easy Start for macOS.

HP has released updates to mitigate these vulnerabilities. However, the exact patch version or remediation instructions are not specified in the provided data. Users should update HP Easy Start for macOS to version 2.16.7.260722 or later once available. Patch status is not yet confirmed—check the official HP advisory for current remediation guidance.