CVE-2026-4682 is a high-severity stack-based buffer overflow vulnerability (CWE-121) in HP DeskJet 2800e All-in-One Printer series. It occurs due to improper validation of WSD scan requests, a Microsoft Windows network scanning protocol. This flaw can be triggered remotely without authentication, potentially leading to remote code execution on the affected device. The vulnerability is network accessible and does not require user interaction or privileges. No official patch or remediation level has been provided by HP at this time, and no known exploits have been reported in the wild.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected HP DeskJet 2800e All-in-One Printer device. This could compromise the device's integrity and potentially allow further network pivoting or disruption of printing/scanning services. The vulnerability is rated high severity with a CVSS 4.0 score of 8.7. There are no reports of active exploitation currently.

Patch status is not yet confirmed — check the HP vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of affected devices, especially restricting access to the WSD scanning service. Monitor HP's security advisories for updates on patches or mitigations. No vendor advisory states that no action is required or that the issue is already mitigated.