CVE-2025-65078

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - 7bc73191-a2b6-4c63-9918-753964601853

Published

2026-02-03

Last modified

2026-02-26

Weaknesses

CWE-426

Affected products

• Cslbl (Lexmark)
• Cslbn (Lexmark)
• Csngv (Lexmark)
• Csnzj (Lexmark)
• Cstat (Lexmark)
• Cstgv (Lexmark)
• Cstls (Lexmark)
• Cstmh (Lexmark)
• Cstmm (Lexmark)
• Cstpc (Lexmark)
• Cstpp (Lexmark)
• Cstzj (Lexmark)
• Cxlbl (Lexmark)
• Cxlbn (Lexmark)
• Cxnzj (Lexmark)
• Cxtat (Lexmark)
• Cxtgv (Lexmark)
• Cxtls (Lexmark)
• Cxtmh (Lexmark)
• Cxtmm (Lexmark)
• Cxtpc (Lexmark)
• Cxtpp (Lexmark)
• Cxtzj (Lexmark)
• Mslbd (Lexmark)
• Mslsg (Lexmark)
• Msngm (Lexmark)
• Msngw (Lexmark)
• Msnsn (Lexmark)
• Mstgm (Lexmark)
• Mstgw (Lexmark)
• Mstsn (Lexmark)
• Mxlbd (Lexmark)
• Mxlsg (Lexmark)
• Mxngm (Lexmark)
• Mxtct (Lexmark)
• Mxtgm (Lexmark)
• Mxtgw (Lexmark)
• Mxtls (Lexmark)
• Mxtpm (Lexmark)
• Mxtsn (Lexmark)

References

• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html