Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-91100

Опубликовано: 16 сент. 2026
Источник: redhat
CVSS3: 6.6
EPSS Низкий

Описание

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

A flaw was found in HP Linux Imaging and Printing (HPLIP) Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or unauthorized file modification under certain conditions.

Меры по смягчению последствий

If HP printer support is not required on the system, remove the HPLIP package to eliminate the attack surface. For Red Hat Enterprise Linux, use sudo dnf remove hplip. Removing this package will disable functionality for HP printers.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6hplipOut of support scope
Red Hat Enterprise Linux 7hplipAffected
Red Hat Enterprise Linux 10hplipFixedRHSA-2026:8288314.10.2026
Red Hat Enterprise Linux 8hplipFixedRHSA-2026:8229513.10.2026
Red Hat Enterprise Linux 9hplipFixedRHSA-2026:8288214.10.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=2535615hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

EPSS

Процентиль: 54%
0.00723
Низкий

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVSS3: 9.8
nvd
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVSS3: 9.8
debian
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerab ...

CVSS3: 9.8
github
около 2 месяцев назад

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

suse-cvrf
около 1 месяца назад

Security update for hplip

EPSS

Процентиль: 54%
0.00723
Низкий

6.6 Medium

CVSS3