Critical CUPS Vulnerabilities Affecting Multiple Ubuntu Releases

Multiple vulnerabilities have been identified in the Common UNIX Printing System (CUPS) affecting several Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. Key vulnerabilities include unauthorized access through incorrect username handling (CVE-2026-27447) and denial of service attacks due to improper handling of job attributes (CVE-2026-34979). Remote attackers can exploit these issues to overwrite files and potentially execute arbitrary code. The vulnerabilities were discovered by various researchers, including Ariel Silver and Asim Viladi Oglu Manizada. Affected users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on April 3, 2026, and patches are available for all affected versions.

Key Points: • CUPS vulnerabilities allow local and remote attackers to exploit systems. • Multiple CVEs (CVE-2026-27447, CVE-2026-34978, CVE-2026-34979) have been identified. • Affected Ubuntu versions include 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS.