This vulnerability (CVE-2026-18243) in HP DesignJet T3500 is classified as CWE-79, indicating improper neutralization of input leading to cross-site scripting (XSS). The issue may allow unauthenticated HTTP requests to access print job previews via the device's web interface. The CVSS 4.0 base score is 6.9 (medium severity), with attack vector as adjacent network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality and low impact on availability and integrity. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker to perform cross-site scripting attacks that expose print job previews to unauthenticated users. This may lead to unauthorized disclosure of sensitive print job information. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit network access to the device's web interface to trusted users and networks to reduce exposure. Monitor HP's official channels for updates or patches addressing this vulnerability.