$ cve CVE-2023-26068 JSON

CVE-2023-26068

9.8

CRITICAL · CVSS 3.1 · EPSS 11.6% (pctl 96)

Patch early

EPSS 11.6% — above the 10% action threshold.

Description

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	11.63% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	none known
Published	2023-04-10
Last modified	2026-06-17

Affected (40)

Vendor	Product
lexmark	b2236
lexmark	b3340
lexmark	b3442
lexmark	cs943
lexmark	cstpc firmware
lexmark	cx730
lexmark	cx735
lexmark	cx930
lexmark	cx931
lexmark	cx942
lexmark	cx943
lexmark	cx944
lexmark	cxtmm firmware
lexmark	cxtpc firmware
lexmark	m1342
lexmark	mb2236
lexmark	mb3442
lexmark	ms331
lexmark	ms431
lexmark	ms439
lexmark	mslbd firmware
lexmark	mslsg firmware
lexmark	msngm firmware
lexmark	mx331
lexmark	mx431
lexmark	mx432
lexmark	mx931
lexmark	mxlbd firmware
lexmark	mxlsg firmware
lexmark	mxtct firmware
lexmark	mxtpm firmware
lexmark	xc4342
lexmark	xc4352
lexmark	xc9325
lexmark	xc9335
lexmark	xc9445
lexmark	xc9455
lexmark	xc9465
lexmark	xm1342
lexmark	xm3142

References

→ the Explorer · watch your stack · NVD