Skip to content
Critical Vulnerabilities in HPLIP Package Expose Users to Remote Code Execution Risks

Critical Vulnerabilities in HPLIP Package Expose Users to Remote Code Execution Risks

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •HPLIP package vulnerabilities allow remote code execution and privilege escalation.
  • •Critical CVEs include CVE-2026-91104 and CVE-2026-91106 with CVSS scores of 9.3.
  • •Immediate updates are necessary to mitigate risks; workarounds include firewall configurations.

Multiple critical vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing (HPLIP) package, affecting various Linux distributions, including AlmaLinux and Rocky Linux. These vulnerabilities, including CVE-2026-91104 and CVE-2026-91106, allow for remote code execution and privilege escalation, posing severe risks to users. Attackers can exploit these flaws through heap-based buffer overflows and improper handling of DSA keys, potentially leading to unauthorized access and system compromise. Users are advised to update to the latest patched version immediately to mitigate these risks. Temporary workarounds include restricting access to the HPLIP service and configuring firewall rules to limit exposure. The vulnerabilities were disclosed on October 16, 2026, with patches available for affected systems. The CVSS scores for these vulnerabilities range from 5.1 to 9.3, indicating a critical threat level.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-07-28
CVE-2025-43023 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-16
CVE-2026-91105 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-16
CVE-2026-91102 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-16
CVE-2026-91104 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-16
CVE-2026-91106 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-16
CVE-2026-91101 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-16
HPLIP vulnerabilities disclosed
Multiple critical vulnerabilities in the HPLIP package were announced, affecting various Linux distributions.
Lwn
2026-10-16
Patches released for HPLIP
Updated packages were released to address the critical vulnerabilities identified in the HPLIP software.
errata.almalinux.org

More articles in this cluster (4)

Following this threat?

Track Hewlett-Packard and CVE-2025-43023 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

Which versions of HPLIP are affected?
The vulnerabilities affect all versions of the HPLIP package prior to the latest patched release.
What should I do if I can't update immediately?
Restrict access to the HPLIP service and configure firewall rules to limit exposure to untrusted networks.
What are the main vulnerabilities identified?
The main vulnerabilities include heap-based buffer overflows and improper handling of DSA keys, leading to remote code execution.