CVE-2026-14544: Hplip: Incomplete Fix Allows Privilege Escalation

Summary

A fix for a previous Hplip vulnerability was not fully implemented, leaving the software open to potential attacks. This could allow a malicious attacker to gain higher-level access to a system. Users should update to the latest version of Hplip to ensure the fix is properly applied.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
red hat	red hat enterprise linux 9	All versions
red hat	red hat enterprise linux 8	All versions
red hat	red hat enterprise linux 10	All versions
red hat	red hat enterprise linux 6	All versions
red hat	red hat enterprise linux 7	All versions

Original title

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary ...

Original description

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.

mitre CVSS3.1 9.8

Vulnerability type

CWE-190 Integer Overflow

https://access.redhat.com/security/cve/CVE-2026-14544 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2496772 issue-tracking x_refsource_REDHAT