Remote Code Execution and Other Vulnerabilities in HPLIP Software by HP
CVE-2026-91100

6.8MEDIUM

Key Information:

Vendor

HP
Status
HP Linux Imaging And Printing Software (HPlip)
Vendor
CVE Published:
16 September 2026

What is CVE-2026-91100?

HP has identified multiple vulnerabilities within its HPLIP software that could allow malicious actors to execute remote code, escalate privileges, cause denial of service, disclose sensitive information, or modify files without authorization. These vulnerabilities can potentially be exploited under specific conditions, posing a significant risk to users of HPLIP.

Affected Version(s)

HP Linux Imaging and Printing Software (HPLIP) Linux 0

References

https://support.hp.com/us-en/document/ish_15646959-156469...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nir Yehoshua, Cipher Security Labs
.