{"id":"CVE-2026-91102","aliases":["ALPINE-CVE-2026-91102","ALSA-2026:82295","ALSA-2026:82882","ALSA-2026:82883","DEBIAN-CVE-2026-91102","EUVD-2026-81001","GHSA-8j52-r29c-rv2m","OESA-2026-4336","OESA-2026-4337","OESA-2026-4338","OESA-2026-4339","RHSA-2026:82882","RHSA-2026:82883","RLSA-2026:82295","RLSA-2026:82882","RLSA-2026:82883","SUSE-SU-2026:4335-1","SUSE-SU-2026:4362-1","SUSE-SU-2026:4364-1","SUSE-SU-2026:4371-1","UBUNTU-CVE-2026-91102","openSUSE-SU-2026:11858-1"],"status":"published","title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","severity":{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00792,"percentile":0.56604,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2026-09-16T18:50:55Z","modified":"2026-11-03T06:32:57Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"hplip","fixed_in":["3.26.6-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-2","3.22.10+dfsg0-2+deb12u1","3.22.10+dfsg0-3","3.22.10+dfsg0-3.1~exp1","3.22.10+dfsg0-4","3.22.10+dfsg0-5","3.22.10+dfsg0-5.1","3.22.10+dfsg0-6","3.22.10+dfsg0-7","3.22.10+dfsg0-8","3.22.10+dfsg0-8.1","3.26.4+dfsg0-1","3.26.4+dfsg0-2","3.26.4+dfsg0-3","3.26.4+dfsg0-4"]},{"source":"osv","ecosystem":"Debian:13","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-8.1","3.22.10+dfsg0-8.1+deb13u1","3.26.4+dfsg0-1","3.26.4+dfsg0-2","3.26.4+dfsg0-3","3.26.4+dfsg0-4"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2203sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp3"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-3.el8_10"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el9_8.3"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.6-1.el10_2.3"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.14.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-3.14.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150700.4.11.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150700.4.11.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150600.4.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150600.4.15.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-150400.3.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.15.7-0ubuntu4","3.15.7-0ubuntu5","3.15.11-0ubuntu1","3.15.11+repack0-1","3.15.11+repack0-1ubuntu1","3.16.2+repack0-1","3.16.2+repack0-1ubuntu1","3.16.2+repack0-3","3.16.3+repack0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.17.7+repack0-3","3.17.10+repack0-1","3.17.10+repack0-2","3.17.10+repack0-3","3.17.10+repack0-4","3.17.10+repack0-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.19.6+dfsg0-1ubuntu1","3.19.8+dfsg0-7","3.19.11+dfsg0-1","3.19.12+dfsg0-1","3.19.12+dfsg0-2","3.19.12+dfsg0-3","3.19.12+dfsg0-3ubuntu1","3.19.12+dfsg0-4ubuntu1","3.20.3+dfsg0-1","3.20.3+dfsg0-2","3.20.3+dfsg0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.21.6+dfsg0-0ubuntu1","3.21.8+dfsg0-2","3.21.12+dfsg0-1","3.21.12+dfsg0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-2ubuntu1","3.22.10+dfsg0-2ubuntu2","3.23.12+dfsg0-0ubuntu4","3.23.12+dfsg0-0ubuntu5","3.23.12+dfsg0-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.4+dfsg0-0ubuntu8","3.24.4+dfsg0-0ubuntu10"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu7","3.24.4+dfsg0-0ubuntu8","3.24.4+dfsg0-0ubuntu8.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.1"}]}],"bundled":10}],"products":[{"vendor":"hp","product":"linux_imaging_and_printing"},{"vendor":"hp inc.","product":"hp linux imaging and printing software (hplip)"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151","tags":["Vendor Advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91102","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8j52-r29c-rv2m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-91102","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-6923","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43023","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91097","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91098","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91099","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91100","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91101","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91102","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91103","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91104","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91105","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91106","tags":["report"]},{"url":"https://bugzilla.redhat.com/2384011","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535600","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535603","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535607","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535613","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535614","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535615","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535617","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535618","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535621","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535622","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-82295.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82882","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-82882.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82883","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-82883.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-91102","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91106","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4337","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4338","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4339","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2384011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535622","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-257310","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82882.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43023","tags":["advisory"]},{"url":"https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2025/08/22/4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91097","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91098","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91099","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91100","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91101","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91102","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91103","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91104","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91105","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91106","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82883.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82295","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333390","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82882","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82883","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264335-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281303","tags":["report"]},{"url":"https://bugzilla.suse.com/1281304","tags":["report"]},{"url":"https://bugzilla.suse.com/1281305","tags":["report"]},{"url":"https://bugzilla.suse.com/1281306","tags":["report"]},{"url":"https://bugzilla.suse.com/1281307","tags":["report"]},{"url":"https://bugzilla.suse.com/1281308","tags":["report"]},{"url":"https://bugzilla.suse.com/1281309","tags":["report"]},{"url":"https://bugzilla.suse.com/1281310","tags":["report"]},{"url":"https://bugzilla.suse.com/1281313","tags":["report"]},{"url":"https://bugzilla.suse.com/1281314","tags":["report"]},{"url":"https://bugzilla.suse.com/1282051","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91106","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264362-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264364-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264371-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-91102","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-91102","title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T18:50:55.872Z","modified":"2026-09-18T03:55:30.388Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:19:52.773089Z"}],"euvd":[{"id":"EUVD-2026-81001","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T18:50:55Z","modified":"2026-09-18T03:55:30Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:28:09.684322Z"}],"ghsa":[{"id":"GHSA-8j52-r29c-rv2m","title":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The...","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T21:32:44Z","modified":"2026-09-21T18:31:56Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:12:15.996228Z"}],"nvd":[{"id":"CVE-2026-91102","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T19:18:03.063Z","modified":"2026-09-21T17:28:16.553Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:48.630594Z"}],"osv":[{"id":"ALPINE-CVE-2026-91102","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T19:18:03.063Z","modified":"2026-11-03T06:32:57.230808417Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"DEBIAN-CVE-2026-91102","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T19:18:03.063Z","modified":"2026-11-02T17:02:35.422597553Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:22:51.302127Z"},{"id":"OESA-2026-4336","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:29Z","modified":"2026-10-16T12:15:19.064275517Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4337","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:30Z","modified":"2026-10-16T12:15:19.065152493Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4338","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:31Z","modified":"2026-10-16T12:15:19.070229816Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4339","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:31Z","modified":"2026-10-16T12:15:19.962333761Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:82882","title":"Red Hat Security Advisory: hplip security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:28:46Z","modified":"2026-10-15T10:30:22.584787234Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:82883","title":"Red Hat Security Advisory: hplip security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:28:46Z","modified":"2026-10-15T10:32:55.450867852Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:82295","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: potential memory buffer overflow (CVE-2020-6923)\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:01:20.904461Z","modified":"2026-10-31T12:30:02.429395892Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:82882","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nBug Fix(es) and Enhancement(s):\n\n* [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:Rocky Linux-257310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-16T12:05:26.574296Z","modified":"2026-10-16T12:45:02.664238401Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:82883","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n\n* hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n\n* hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n\n* hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n\n* hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n\n* hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n\n* hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n\n* hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n\n* HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\nBug Fix(es) and Enhancement(s):\n\n* [IMAGE-MODE] missing /var/lib/hp on image-mode [rhel-10] (JIRA:Rocky Linux-266547)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-15T12:20:13.898768Z","modified":"2026-10-15T12:45:59.152381388Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-91102","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","status":"published","published":"2026-09-16T19:18:00Z","modified":"2026-10-28T20:17:50.212835747Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:57:40.980117Z"},{"id":"ALSA-2026:82295","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: potential memory buffer overflow (CVE-2020-6923)\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-29T11:02:24.856874212Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:82882","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-14T00:00:00Z","modified":"2026-10-29T11:32:38.272974941Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:82883","title":"Important: hplip security, bug fix, and enhancement update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode [almalinux-10] (JIRA:AlmaLinux-266547)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-14T00:00:00Z","modified":"2026-10-29T11:31:00.4441848Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"openSUSE-SU-2026:11858-1","title":"hplip-3.26.6-1.1 on GA media","description":"These are all security issues fixed in the hplip-3.26.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-23T00:00:00Z","modified":"2026-09-24T18:23:14.498208861Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:4335-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\n- CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281303).\n- CVE-2026-91098: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281304).\n- CVE-2026-91099: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281305).\n- CVE-2026-91100: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281306).\n- CVE-2026-91101: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281307).\n- CVE-2026-91102: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281308).\n- CVE-2026-91103: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281309).\n- CVE-2026-91104: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281313).\n- CVE-2026-91105: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281310).\n- CVE-2026-91106: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281314\n  bsc#1282051).\n\nChanges for hplip:\n\n- Fix download of propietary plugin for 3.26.6\n- Update to HPLIP 3.26.6\n- Add support for the following new printers:\n * HP ScanJet Enterprise Flow N9000 sn1\n * HP ScanJet Enterprise Flow 9000 s1\n * HP ScanJet Pro 4200 s1\n * HP LaserJet Pro 4006dn printer\n * HP LaserJet Pro 4006dw printer\n * HP LaserJet Pro 4006n printer\n * HP LaserJet Pro 4002d printer\n * HP LaserJet Pro 4007dw printer\n * HP LaserJet Pro 4007n printer\n * HP LaserJet Pro 4008d\n * HP LaserJet Pro 4008dn\n * HP LaserJet Pro 4008dw\n * HP LaserJet Pro MFP 4112dw printer\n * HP LaserJet Pro MFP 4112fdn printer\n * HP LaserJet Pro MFP 4112fdw printer\n * HP LaserJet Pro MFP 4113dw printer\n * HP LaserJet Pro MFP 4113dwg printer\n * HP LaserJet Pro MFP 4113fdn printer\n * HP LaserJet Pro MFP 4113fdng printer\n * HP LaserJet Pro MFP 4113fdw printer\n * HP LaserJet Pro MFP 4113fdwg printer\n * HP LaserJet Pro MFP 4114dw\n * HP LaserJet Pro MFP 4114fdn\n * HP LaserJet Pro MFP 4114fdw\n","status":"published","published":"2026-09-24T08:37:31Z","modified":"2026-09-24T18:30:05.606874405Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4362-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\n- CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281303).\n- CVE-2026-91098: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281304).\n- CVE-2026-91099: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281305).\n- CVE-2026-91100: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281306).\n- CVE-2026-91101: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281307).\n- CVE-2026-91102: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281308).\n- CVE-2026-91103: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281309).\n- CVE-2026-91104: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281313).\n- CVE-2026-91105: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281310).\n- CVE-2026-91106: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281314\n  bsc#1282051).\n\nChanges for hplip:\n\n- Fix download of propietary plugin for 3.26.6\n- Update to HPLIP 3.26.6\n- Add support for the following new printers:\n * HP ScanJet Enterprise Flow N9000 sn1\n * HP ScanJet Enterprise Flow 9000 s1\n * HP ScanJet Pro 4200 s1\n * HP LaserJet Pro 4006dn printer\n * HP LaserJet Pro 4006dw printer\n * HP LaserJet Pro 4006n printer\n * HP LaserJet Pro 4002d printer\n * HP LaserJet Pro 4007dw printer\n * HP LaserJet Pro 4007n printer\n * HP LaserJet Pro 4008d\n * HP LaserJet Pro 4008dn\n * HP LaserJet Pro 4008dw\n * HP LaserJet Pro MFP 4112dw printer\n * HP LaserJet Pro MFP 4112fdn printer\n * HP LaserJet Pro MFP 4112fdw printer\n * HP LaserJet Pro MFP 4113dw printer\n * HP LaserJet Pro MFP 4113dwg printer\n * HP LaserJet Pro MFP 4113fdn printer\n * HP LaserJet Pro MFP 4113fdng printer\n * HP LaserJet Pro MFP 4113fdw printer\n * HP LaserJet Pro MFP 4113fdwg printer\n * HP LaserJet Pro MFP 4114dw\n * HP LaserJet Pro MFP 4114fdn\n * HP LaserJet Pro MFP 4114fdw\n","status":"published","published":"2026-09-28T15:00:40Z","modified":"2026-09-29T09:15:08.498494305Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4364-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\n- CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281303).\n- CVE-2026-91098: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281304).\n- CVE-2026-91099: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281305).\n- CVE-2026-91100: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281306).\n- CVE-2026-91101: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281307).\n- CVE-2026-91102: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281308).\n- CVE-2026-91103: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281309).\n- CVE-2026-91104: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281313).\n- CVE-2026-91105: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281310).\n- CVE-2026-91106: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281314\n  bsc#1282051).\n\nChanges for hplip:\n\n- Fix download of propietary plugin for 3.26.6\n- Update to HPLIP 3.26.6\n- Add support for the following new printers:\n * HP ScanJet Enterprise Flow N9000 sn1\n * HP ScanJet Enterprise Flow 9000 s1\n * HP ScanJet Pro 4200 s1\n * HP LaserJet Pro 4006dn printer\n * HP LaserJet Pro 4006dw printer\n * HP LaserJet Pro 4006n printer\n * HP LaserJet Pro 4002d printer\n * HP LaserJet Pro 4007dw printer\n * HP LaserJet Pro 4007n printer\n * HP LaserJet Pro 4008d\n * HP LaserJet Pro 4008dn\n * HP LaserJet Pro 4008dw\n * HP LaserJet Pro MFP 4112dw printer\n * HP LaserJet Pro MFP 4112fdn printer\n * HP LaserJet Pro MFP 4112fdw printer\n * HP LaserJet Pro MFP 4113dw printer\n * HP LaserJet Pro MFP 4113dwg printer\n * HP LaserJet Pro MFP 4113fdn printer\n * HP LaserJet Pro MFP 4113fdng printer\n * HP LaserJet Pro MFP 4113fdw printer\n * HP LaserJet Pro MFP 4113fdwg printer\n * HP LaserJet Pro MFP 4114dw\n * HP LaserJet Pro MFP 4114fdn\n * HP LaserJet Pro MFP 4114fdw\n","status":"published","published":"2026-09-28T15:01:14Z","modified":"2026-09-29T09:15:08.55871183Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4371-1","title":"Security update for hplip","description":"This update for hplip fixes the following issues:\n\n- CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281303).\n- CVE-2026-91098: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281304).\n- CVE-2026-91099: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281305).\n- CVE-2026-91100: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281306).\n- CVE-2026-91101: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281307).\n- CVE-2026-91102: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281308).\n- CVE-2026-91103: medium severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281309).\n- CVE-2026-91104: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281313).\n- CVE-2026-91105: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281310).\n- CVE-2026-91106: critical severity issue - multiple vulnerabilities enable remote code execution, privilege escalation,\n  denial of service, information disclosure, or unauthorized file modification under certain conditions (bsc#1281314\n  bsc#1282051).\n\nChanges for hplip:\n\n- Fix download of propietary plugin for 3.26.6\n- Update to HPLIP 3.26.6\n- Add support for the following new printers:\n * HP ScanJet Enterprise Flow N9000 sn1\n * HP ScanJet Enterprise Flow 9000 s1\n * HP ScanJet Pro 4200 s1\n * HP LaserJet Pro 4006dn printer\n * HP LaserJet Pro 4006dw printer\n * HP LaserJet Pro 4006n printer\n * HP LaserJet Pro 4002d printer\n * HP LaserJet Pro 4007dw printer\n * HP LaserJet Pro 4007n printer\n * HP LaserJet Pro 4008d\n * HP LaserJet Pro 4008dn\n * HP LaserJet Pro 4008dw\n * HP LaserJet Pro MFP 4112dw printer\n * HP LaserJet Pro MFP 4112fdn printer\n * HP LaserJet Pro MFP 4112fdw printer\n * HP LaserJet Pro MFP 4113dw printer\n * HP LaserJet Pro MFP 4113dwg printer\n * HP LaserJet Pro MFP 4113fdn printer\n * HP LaserJet Pro MFP 4113fdng printer\n * HP LaserJet Pro MFP 4113fdw printer\n * HP LaserJet Pro MFP 4113fdwg printer\n * HP LaserJet Pro MFP 4114dw\n * HP LaserJet Pro MFP 4114fdn\n * HP LaserJet Pro MFP 4114fdw\n","status":"published","published":"2026-09-28T15:10:28Z","modified":"2026-09-29T09:15:07.693246644Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}