Skip to content
Critical CUPS Vulnerabilities Affecting Multiple Ubuntu Releases

Critical CUPS Vulnerabilities Affecting Multiple Ubuntu Releases

First seen 8 Jun 2026, 22:52 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 9, 2026 at 22:30 UTC

Multiple vulnerabilities have been identified in the Common UNIX Printing System (CUPS) affecting several Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. Key vulnerabilities include unauthorized access through incorrect username handling (CVE-2026-27447) and denial of service attacks due to improper handling of job attributes (CVE-2026-34979). Remote attackers can exploit these issues to overwrite files and potentially execute arbitrary code. The vulnerabilities were discovered by various researchers, including Ariel Silver and Asim Viladi Oglu Manizada. Affected users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on April 3, 2026, and patches are available for all affected versions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 103d ago How this analysis works

Timeline

2026-04-03
Multiple CUPS vulnerabilities disclosed
CVE-2026-27447, CVE-2026-34978, CVE-2026-34979, CVE-2026-34980, and CVE-2026-34990 were published, impacting CUPS functionality.
Linuxsecurity
2026-04-03
CVE-2026-34978 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-03
CVE-2026-34990 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-03
CVE-2026-34980 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-03
CVE-2026-27447 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-03
CVE-2026-34979 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-07
CVE-2026-39316 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-07
CVE-2026-39314 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-24
Additional vulnerabilities published
CVE-2026-41079 was published, adding to the list of vulnerabilities affecting CUPS.
Linuxsecurity
2026-04-24
CVE-2026-41079 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (4)

Following this threat?

Track Ubuntu and CVE-2026-27447 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 3