Remote Code Execution and Privilege Escalation Risks in HPLIP by HP
CVE-2026-91103

5.1MEDIUM

Key Information:

Vendor

HP

Vendor
CVE Published:
16 September 2026

What is CVE-2026-91103?

HP has disclosed multiple vulnerabilities within HPLIP that could potentially be exploited under certain conditions. These vulnerabilities may lead to remote code execution, allowing attackers to gain unauthorized access to systems. Additionally, there is a risk of privilege escalation, where a user could elevate their permissions, exposing sensitive data and critical system functionalities. Other potential impacts include denial of service attacks, information disclosure, and unauthorized modifications of files, which pose significant security risks. Detailed remediation steps and best practices to mitigate these vulnerabilities are provided in HP's official documentation.

Affected Version(s)

HP Linux Imaging and Printing Software (HPLIP) Linux 0

References

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nir Yehoshua, Cipher Security Labs
.