Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CUPS allows unauthorized code execution on shared printers
published 3 months ago
Summary
An attacker can run malicious code on shared printers if they have access to the printer queue. This is a concern for businesses that allow multiple users to print to the same printer. To mitigate this risk, ensure that printer queues are not shared across different users or networks.
What to do
- Update canonical cups to version 2.1.3-4ubuntu0.11+esm13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:16.04:LTS | canonical | cups |
< 2.1.3-4ubuntu0.11+esm13 Fix: upgrade to 2.1.3-4ubuntu0.11+esm13
|
Original advisory text
CUPS vulnerability
It was discovered that CUPS did not properly filter control characters in IPP string attributes and PPD keywords. An unauthenticated attacker could exploit this to execute arbitrary code as the lp user on systems with shared target queues.
References
- https://ubuntu.com/security/notices/USN-8578-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-34980 Third Party Advisory
Timeline
Published21 Jul 2026
Updated22 Jul 2026
First seen22 Jul 2026
Sources
USN-8578-1 · OSV
Track software like this
Free during beta