Vulnerabilities

TI-2026-74874 CVE-2026-61702

Path traversal in OpenPrinting CUPS banner handling discloses files

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00424 Published 2026-10-15 Fixed in 2.4.20 CWE-22

TI-2026-74869 CVE-2026-55453

CUPS ipp backend injection can alter queue PPD settings

LOW 15

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 Fixed in 2.4.20 CWE-74

TI-2026-74871 CVE-2026-55480

Symlink race in CUPS PPD tempfile lets lp users overwrite root files

MEDIUM 59

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00202 Published 2026-10-15 Partial fix · 2.4.20 CWE-377

TI-2026-74870 CVE-2026-55467

CUPS fax option values bypass control character sanitizer

MEDIUM 46

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00182 Published 2026-10-15 Fixed in 2.4.20 CWE-150

TI-2026-69846 CVE-2026-107890

NULL pointer dereference in OpenPrinting CUPS scheduler via print jobs

MEDIUM 58

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69844 CVE-2026-107888

NULL pointer dereference in CUPS lets job submissions crash cupsd

LOW 24

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69843 CVE-2026-107886

Double free in OpenPrinting CUPS printer-class management

MEDIUM 62

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00241 Published 2026-10-09 Partial fix · 2.4.20 CWE-415

TI-2026-69842 CVE-2026-107885

OpenPrinting CUPS resource exhaustion in job submission timeout handling

MEDIUM 58

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2026-10-09 Partial fix CWE-770

TI-2026-29716 CVE-2026-41079

OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00409 Published 2026-04-24 Partial fix · 2.4.17 CWE-125

TI-2026-28306 CVE-2026-39316

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-04-07 Partial fix CWE-416

TI-2026-28304 CVE-2026-39314

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-04-07 Partial fix CWE-191

TI-2026-27202 CVE-2026-34980

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

MEDIUM 60

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.01652 Published 2026-04-03 Partial fix CWE-20

TI-2026-27201 CVE-2026-34979

OpenPrinting CUPS: Heap overflow in `get_options()`

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-03 Partial fix CWE-122

TI-2026-27200 CVE-2026-34978

Path traversal in OpenPrinting cups

HIGH 68

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-04-03 Partial fix CWE-22

TI-2026-27212 CVE-2026-34990

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-287

TI-2026-21858 CVE-2026-27447

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-863

TI-2025-36195 CVE-2025-58436

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

TI-2025-38265 CVE-2025-61915

OpenPrinting CUPS vulnerable to stack based out-of-bound write

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00496 Published 2025-11-29 Partial fix · 2.4.15 CWE-124

TI-2025-39914 CVE-2025-64524

CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

MEDIUM 58

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00222 Published 2025-11-20 Fix deferred CWE-122

TI-2025-39895 CVE-2025-64503

[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster

MEDIUM 52

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00228 Published 2025-11-12 Partial fix CWE-787

TI-2025-35695 CVE-2025-57812

[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`

LOW 18

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks need…

CVSS 3.1LOW 3.7 Adjacent network Low privileges No interaction EPSS 0.00478 Published 2025-11-12 Partial fix CWE-125

TI-2025-36152 CVE-2025-58364

cups: Remote DoS via null dereference

MEDIUM 62

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0116 Published 2025-09-11 Partial fix · 2.4.13 CWE-20

TI-2025-35903 CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

HIGH 70

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.01001 Published 2025-09-11 Partial fix · 2.4.13 CWE-287

TI-2024-30173 CVE-2024-45062 · GHSA-rxv3-g639-m9x9

Stack-based buffer overflow in OpenPrinting ippusbxd

HIGH 65

A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00353 Published 2025-08-19 No fix listed CWE-121

TI-2024-31543 CVE-2024-47175

libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

HIGH 78

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63607 Published 2024-09-26 Partial fix CWE-20