{"items":[{"id":"CVE-2025-65078","published":"2026-02-03T20:51:20.556Z","updated":"2026-02-26T15:04:23.262Z","title":"Untrusted search path vulnerability in Embedded Solutions Framework","severity":"CRITICAL","score":9.3,"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2025-65077","published":"2026-02-03T20:44:32.330Z","updated":"2026-11-03T22:03:07.714Z","title":"Relative path traversal vulnerability in Embedded Solutions Framework","severity":"HIGH","score":8.8,"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","kev":false,"epss":0.00681,"kevAdded":null},{"id":"CVE-2025-65081","published":"2026-02-03T20:39:14.501Z","updated":"2026-02-26T15:04:23.914Z","title":"Out-of-bounds read vulnerability in Postscript interpreter","severity":"MEDIUM","score":6.9,"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2025-65080","published":"2026-02-03T20:35:54.592Z","updated":"2026-02-26T15:04:24.195Z","title":"Type confusion vulnerability in Postscript interpreter","severity":"MEDIUM","score":6.9,"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2025-65079","published":"2026-02-03T20:23:24.405Z","updated":"2026-02-26T15:04:24.490Z","title":"Heap-based buffer overflow vulnerability in Postscript interpreter","severity":"MEDIUM","score":6.9,"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2025-9269","published":"2025-09-09T17:21:36.589Z","updated":"2025-09-29T15:34:06.094Z","title":"Server-Side Request Forgery (SSRF) vulnerability found in embedded web server","severity":"MEDIUM","score":6.9,"vendor":"Lexmark","product":"CX, XC, CS, MS, MX, XM, et. al.","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2025-4046","published":"2025-08-19T13:12:28.574Z","updated":"2026-02-26T17:48:28.920Z","title":"Missing Authorization in Lexmark Cloud Services badge management","severity":"HIGH","score":8.5,"vendor":"Lexmark","product":"Lexmark Cloud Services","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2025-4044","published":"2025-08-19T13:12:09.782Z","updated":"2026-02-26T17:48:29.270Z","title":"XML External Entity Injection vulnerability in various Lexmark Universal Drivers","severity":"HIGH","score":8.2,"vendor":"Lexmark","product":"Universal Print Driver","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2024-11347","published":"2025-02-13T18:55:22.943Z","updated":"2025-02-13T19:09:37.473Z","title":"Access of Resource Using Incompatible Type in Postscript interpreter","severity":"HIGH","score":7.3,"vendor":"Lexmark International","product":"CX, XC, CS, et. al.","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2024-11346","published":"2025-02-13T18:54:41.167Z","updated":"2025-02-13T19:17:04.920Z","title":"Access of Resource Using Incompatible Type in Postscript interpreter","severity":"HIGH","score":7.3,"vendor":"Lexmark International","product":"CX, XC, CS, MS, MX, XM, et. al.","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2024-11344","published":"2025-02-13T18:51:23.777Z","updated":"2025-02-13T19:19:11.784Z","title":"Type confusion vulnerability in the Postscript interpreter in various Lexmark devices","severity":"HIGH","score":7.3,"vendor":"Lexmark","product":"CX, XC, CS, MS, MX, XM, et. al.","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2025-1127","published":"2025-02-13T18:49:43.500Z","updated":"2025-02-13T19:14:43.391Z","title":"Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server","severity":"CRITICAL","score":9.1,"vendor":"Lexmark","product":"CX, XC, CS, MS, MX, XM, et. al.","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2024-11345","published":"2025-02-13T18:46:33.859Z","updated":"2025-02-13T19:19:43.200Z","title":"Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices","severity":"HIGH","score":7.3,"vendor":"Lexmark International","product":"CX, XC, CS, MS, MX, XM, et. al.","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2025-1126","published":"2025-02-11T16:50:34.270Z","updated":"2025-02-12T20:51:45.122Z","title":"Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).","severity":"CRITICAL","score":9.3,"vendor":"Lexmark","product":"Lexmark Print Management Client","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2023-50733","published":"2025-01-21T22:03:28.688Z","updated":"2025-01-22T18:43:36.163Z","title":"A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.","severity":"HIGH","score":8.6,"vendor":"Lexmark","product":"various","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2023-50739","published":"2025-01-17T23:47:13.923Z","updated":"2025-01-22T14:23:31.226Z","title":"A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.","severity":"HIGH","score":8.8,"vendor":"Lexmark","product":"Printer Firmware","kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2023-50738","published":"2025-01-17T21:10:44.220Z","updated":"2025-01-17T22:02:59.237Z","title":"A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.","severity":"MEDIUM","score":4.3,"vendor":"Lexmark","product":"Printer Firmware","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2023-50737","published":"2024-02-28T02:38:03.334Z","updated":"2024-08-23T14:56:24.259Z","title":"An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.","severity":"CRITICAL","score":9.1,"vendor":"Lexmark","product":"various","kev":false,"epss":0.00968,"kevAdded":null},{"id":"CVE-2023-50736","published":"2024-02-28T02:37:45.438Z","updated":"2024-08-23T14:56:10.517Z","title":"A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.","severity":"CRITICAL","score":9,"vendor":"Lexmark","product":"various","kev":false,"epss":0.00766,"kevAdded":null},{"id":"CVE-2023-50735","published":"2024-02-28T02:37:26.310Z","updated":"2024-08-23T14:55:56.910Z","title":"A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.","severity":"CRITICAL","score":9,"vendor":"Lexmark","product":"various","kev":false,"epss":0.00766,"kevAdded":null},{"id":"CVE-2023-50734","published":"2024-02-28T01:47:47.211Z","updated":"2024-08-23T14:52:38.870Z","title":"A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.","severity":"CRITICAL","score":9,"vendor":"Lexmark","product":"various","kev":false,"epss":0.00765,"kevAdded":null}]}