PT-2026-5946 · Lexmark · Lexmark Embedded Solutions Framework

Published 2026-02-03 · Updated 2026-02-12 · CVE-2025-65078

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Lexmark Embedded Solutions Framework (affected versions not specified)

Description An untrusted search path issue exists in Lexmark devices, potentially allowing an attacker to execute arbitrary code. This flaw enables DLL hijacking without requiring user interaction. The vulnerability affects the Embedded Solutions Framework.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-65078

ZDI-26-062

Affected Products

Lexmark Embedded Solutions Framework

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-65078 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-062 · Security Note
• https://twitter.com/CVEnew/status/2018799275849793568 · Twitter Post
• https://lexmark.com/en_us/solutions/security/lexmark-security-advisories.html · Note
• https://twitter.com/TheZDIBugs/status/2022053556392489178 · Twitter Post
• https://twitter.com/0dayPublishing/status/2018790735852482961 · Twitter Post