Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-91105: HP Linux Imaging and Printing may allow remote code execution
CVE-2026-91105 · published 25 days ago
Summary
The HP Linux Imaging and Printing (HPLIP) software contains several flaws that could let an attacker run their own programs, gain higher privileges, crash the service, view sensitive data, or change files. These risks apply when the software is used in its default configuration and exposed to untrusted input. Install the latest HPLIP update from HP as soon as possible to fix the problems.
What to do
- Update hp inc. hp linux imaging and printing software (hplip) to version 3.26.6 or later.
- Update hp linux_imaging_and_printing to version 3.26.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | hp inc. | hp linux imaging and printing software (hplip) | < 3.26.6 |
| Debian:12 | debian | hplip | All versions |
| – | hp | linux_imaging_and_printing |
< 3.26.6 cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* |
Original advisory text
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
References
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-91105 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.6
High
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published16 Sep 2026
Updated7 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta