PT-2026-5945 · Lexmark · Lexmark Embedded Solutions Framework

Published 2026-02-03 · Updated 2026-02-05 · CVE-2025-65077

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Lexmark Embedded Solutions Framework (affected versions not specified)

Description A relative path traversal issue exists in the Embedded Solutions Framework used in Lexmark devices. An attacker could potentially use this to execute arbitrary code with unprivileged user access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-65077

ZDI-26-063

Affected Products

Lexmark Embedded Solutions Framework

References · 4

• https://zerodayinitiative.com/advisories/ZDI-26-063 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-65077 · Security Note
• https://twitter.com/CVEnew/status/2018799279486181607 · Twitter Post
• https://lexmark.com/en_us/solutions/security/lexmark-security-advisories.html · Note