Critical CUPS Vulnerability in Ubuntu 16.04 Allows Code Execution

A critical vulnerability (CVE-2026) has been identified in the Common UNIX Printing System (CUPS) used in Ubuntu 16.04. The flaw allows unauthenticated attackers to execute arbitrary code as the lp user through specially crafted print job requests. This issue arises from improper filtering of control characters in IPP string attributes and PPD keywords. Systems with shared target queues are particularly at risk. To mitigate the threat, users are advised to update to specific package versions provided in the security notice. The vulnerability affects Ubuntu 16.04 LTS installations with CUPS versions prior to the patched release. A standard system update will apply the necessary changes. The vulnerability highlights the importance of maintaining least privilege access in Linux systems.

Key Points: • CUPS vulnerability allows unauthenticated code execution as lp user. • Affected systems include Ubuntu 16.04 LTS with specific CUPS versions. • Users should update their systems to mitigate the risk.