CVE Database›Document archive›CVE-2026-91103

CVE-2026-91103

hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service

Loading…

Severity

Moderate

Red Hat Product Security

6.3

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 25, 2026

Description

A flaw was found in HPLIP (HP Linux Imaging and Printing) software. This issue encompasses multiple vulnerabilities across several components, potentially allowing an attacker to achieve remote code execution, elevate their privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or unauthorized file modification under certain conditions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

HPLIP is a collection of drivers for HP printers. If HP printers are not in use, the hplip package can be removed to eliminate the attack surface.

To remove the package: sudo dnf remove hplip

This action may affect printing functionality for HP devices.

CVSS / CWE

CVSS 3.1 · 6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-266 · Incorrect Privilege Assignment