---
id: 10234
title: "[CVE-2023-26067] Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022"
cve: CVE-2023-26067
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/lexmark-command-injection-vulnerability-zdi-can-19470-pwn2own-toronto-2022/"
published_at: "2023-08-10T20:41:17Z"
tags: ["zero-day", "vulnerability-research", "exploit", "command-injection", "horizon3", "lexmark", "cve-2023-26067"]
phying_url: "https://phying.com/item/10234"
lang: en
---

# [CVE-2023-26067] Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022

## Summary

In December 2022, we competed at our first pwn2own. We were able to successfully exploit the Lexmark MC3224i using a command injection 0-day.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-26067
- **Published:** 2023-08-10T20:41:17Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/lexmark-command-injection-vulnerability-zdi-can-19470-pwn2own-toronto-2022/
- **Phying News:** https://phying.com/item/10234