Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-91098

Опубликовано: 16 сент. 2026
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

A flaw was found in HP Linux Imaging and Printing (HPLIP) software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain conditions.

Отчет

This vulnerability is rated as Important severity because an unauthenticated attacker could trigger arbitrary code execution or elevate privileges if a local user interacts with malicious network resources. Red Hat Enterprise Linux systems typically install HPLIP only when configured for desktop environments or dedicated print servers requiring HP imaging support. Headless server installations that do not manage HP printing hardware or invoke HPLIP client utilities are not exposed to this flaw during standard operations.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6hplipOut of support scope
Red Hat Enterprise Linux 7hplipAffected
Red Hat Enterprise Linux 10hplipFixedRHSA-2026:8288314.10.2026
Red Hat Enterprise Linux 8hplipFixedRHSA-2026:8229513.10.2026
Red Hat Enterprise Linux 9hplipFixedRHSA-2026:8288214.10.2026

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-494
https://bugzilla.redhat.com/show_bug.cgi?id=2535603hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation

EPSS

Процентиль: 63%
0.01005
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVSS3: 9.8
nvd
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVSS3: 9.8
debian
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerab ...

CVSS3: 9.8
github
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVSS3: 9.8
altlinux
около 1 месяца назад

ALT-PU-2026-16571: package `hplip` update to version 3.26.6-alt2

EPSS

Процентиль: 63%
0.01005
Низкий

8.8 High

CVSS3