Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat HPLIP could let attackers control printers

published 20 days ago

Summary

The HPLIP printing software and its libraries on Red Hat systems contain a weakness that could allow an attacker to send commands to connected printers or view printed information. This could lead to unwanted printing or disclosure of confidential documents. Apply the latest Red Hat security update for hplip, hplip-libs, and libsane-hpaio as soon as possible.

What to do

Update redhat hplip to version 0:3.26.6-1.el9_8.3.
Update redhat hplip-libs to version 0:3.26.6-1.el9_8.3.
Update redhat libsane-hpaio to version 0:3.26.6-1.el9_8.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	hplip	< 0:3.26.6-1.el9_8.3 Fix: upgrade to 0:3.26.6-1.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	hplip-libs	< 0:3.26.6-1.el9_8.3 Fix: upgrade to 0:3.26.6-1.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	libsane-hpaio	< 0:3.26.6-1.el9_8.3 Fix: upgrade to 0:3.26.6-1.el9_8.3

Original advisory text

Red Hat Security Advisory: hplip security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:82882 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2384011 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535600 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535603 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535607 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535613 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535614 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535615 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535617 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535618 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535621 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2535622 Third Party Advisory
https://issues.redhat.com/browse/RHEL-257310 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82882.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-43023 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-43023 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-43023 Vendor Advisory
https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033 Third Party Advisory
https://www.openwall.com/lists/oss-security/2025/08/22/4 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-91097 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91097 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91097 Vendor Advisory
https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-91098 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91098 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91098 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91099 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91099 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91099 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91100 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91100 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91100 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91101 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91101 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91101 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91102 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91102 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91102 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91103 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91103 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91103 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91104 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91104 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91104 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91105 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91105 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91105 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-91106 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-91106 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91106 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published15 Oct 2026

Updated21 Oct 2026

First seen21 Oct 2026

Sources

RHSA-2026:82882 · OSV

Track software like this

Free during beta