HP Inc has identified a security vulnerability (CVE-2026-89083) in the HP Advance software component of HP AC Print & Scan. The vulnerability is categorized as CWE-94 (Improper Control of Generation of Code), which can lead to elevation of privilege, remote code execution, or arbitrary file write under certain conditions. The flaw affects the HP Advance server hosting the software. The CVSS 4.0 score is 9.3, reflecting a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality and security integrity. No specific affected versions or patch details are provided in the input data.

The vulnerability allows an unauthenticated attacker to potentially execute arbitrary code remotely, elevate privileges, or write arbitrary files on the HP Advance server hosting the HP AC Print & Scan software. This could lead to full compromise of the affected system's confidentiality and security integrity. The high CVSS score (9.3) reflects the critical nature of this flaw. There is no information about known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Users should monitor HP's official advisories for updates and apply patches promptly once available.