Remote Code Execution and Privilege Escalation Vulnerabilities in HPLIP by HP
CVE-2026-91099

5.1MEDIUM

Key Information:

Vendor

HP

Vendor
CVE Published:
16 September 2026

What is CVE-2026-91099?

HP has identified multiple vulnerabilities in its HPLIP software, which may expose systems to potential attacks. These software components can be exploited to enable remote code execution, allowing attackers to run arbitrary commands on the affected system. Additionally, the vulnerabilities may facilitate privilege escalation, permitting unauthorized users to gain elevated access rights. Other risks include the possibility of denial of service, information disclosure, and unauthorized modification of files, all of which could compromise system integrity and data confidentiality. Users are advised to update to the latest version to mitigate these risks.

Affected Version(s)

HP Linux Imaging and Printing Software (HPLIP) Linux 0

References

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nir Yehoshua, Cipher Security Labs
.