Critical Vulnerabilities in SUSE HPLIP Affecting Multiple Systems

SUSE has released updates addressing critical vulnerabilities in the HPLIP software, impacting various HP printers. Key issues include CVE-2025-43023, which involves weak code signing leading to potential key spoofing, and CVE-2026-8631, which allows escalation of privileges through an integer overflow. Additionally, CVE-2026-8632 enables arbitrary code execution via command injection. An unauthenticated remote denial-of-service vulnerability in the SLP parser is also present. These vulnerabilities could allow attackers to execute arbitrary code or disrupt services on affected devices. The updates were released on June 2 and June 3, 2026, with critical ratings assigned to the vulnerabilities. Users are urged to apply the patches immediately to mitigate risks.

Key Points: • Critical vulnerabilities in HPLIP affect HP printers, with potential for code execution and DoS. • CVE-2025-43023 and CVE-2026-8631 are among the most severe issues identified. • Immediate patching is recommended to secure affected systems.