Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-91104: HP Linux Imaging and Printing could let attackers run code
CVE-2026-91104 · published 26 days ago
Summary
The HP Linux Imaging and Printing software on your systems may allow a remote attacker to run their own programs, gain higher access, cause crashes, view sensitive data, or change files. This could expose your network to data loss or unauthorized activity. Install the latest HP-provided updates for HPLIP as soon as possible to close these gaps.
What to do
- Update hp inc. hp linux imaging and printing software (hplip) to version 3.26.6 or later.
- Update hp linux_imaging_and_printing to version 3.26.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | hp inc. | hp linux imaging and printing software (hplip) | < 3.26.6 |
| Debian:12 | debian | hplip | All versions |
| – | hp | linux_imaging_and_printing |
< 3.26.6 cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* |
Original advisory text
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
References
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-91104 Vendor Advisory
Severity
9.3
Critical
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published16 Sep 2026
Updated12 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta