Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-91106: HP Linux Imaging and Printing may allow remote attacks
CVE-2026-91106 · published 27 days ago
Summary
Various parts of HP's Linux Imaging and Printing software could let an attacker run their own code, gain higher access, crash the service, view private data, or change files. This risk only applies under certain conditions, but it could affect any system using the software. Apply the latest updates from HP as soon as possible to fix the problems.
What to do
- Update hp inc. hp linux imaging and printing software (hplip) to version 3.26.6 or later.
- Update hp linux_imaging_and_printing to version 3.26.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | hp inc. | hp linux imaging and printing software (hplip) | < 3.26.6 |
| Debian:12 | debian | hplip | All versions |
| – | hp | linux_imaging_and_printing |
< 3.26.6 cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* |
Original advisory text
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
References
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-91106 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.3
Critical
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published16 Sep 2026
Updated12 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta