Remote Code Execution and Privilege Escalation Vulnerabilities in HPLIP by HP
CVE-2026-91106

9.3CRITICAL

Key Information:

Vendor

HP
Status
HP Linux Imaging And Printing Software (HPlip)
Vendor
CVE Published:
16 September 2026

What is CVE-2026-91106?

HP has discovered multiple vulnerabilities in HPLIP that may allow attackers to execute arbitrary code remotely, escalate privileges, and cause denial of service. These vulnerabilities also present risks of information disclosure and unauthorized file modification, depending on the specific conditions of exploitation. Users are advised to update their software promptly to mitigate these risks.

Affected Version(s)

HP Linux Imaging and Printing Software (HPLIP) Linux 0

References

https://support.hp.com/us-en/document/ish_15646959-156469...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.