Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-91098: HP Linux Imaging and Printing can be exploited remotely
CVE-2026-91098 · published 25 days ago
Summary
The HP Linux Imaging and Printing (HPLIP) software contains several flaws that could let an attacker run code, gain higher privileges, crash the service, view private data, or change files on the affected system. This could affect any computer using HPLIP for printing or scanning. Update to the latest HPLIP version provided by HP to close these gaps.
What to do
- Update hp inc. hp linux imaging and printing software (hplip) to version 3.26.6 or later.
- Update hp linux_imaging_and_printing to version 3.26.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | hp inc. | hp linux imaging and printing software (hplip) | < 3.26.6 |
| Debian:12 | debian | hplip | All versions |
| – | hp | linux_imaging_and_printing |
< 3.26.6 cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* |
Original advisory text
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
References
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-91098 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.6
High
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published16 Sep 2026
Updated7 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta