Linuxsecurity Critical Vulnerabilities in SUSE HPLIP Affecting Multiple Systems
Article Content
- •Critical vulnerabilities in HPLIP affect HP printers, with potential for code execution and DoS.
- •CVE-2025-43023 and CVE-2026-8631 are among the most severe issues identified.
- •Immediate patching is recommended to secure affected systems.
SUSE has released updates addressing critical vulnerabilities in the HPLIP software, impacting various HP printers. Key issues include CVE-2025-43023, which involves weak code signing leading to potential key spoofing, and CVE-2026-8631, which allows escalation of privileges through an integer overflow. Additionally, CVE-2026-8632 enables arbitrary code execution via command injection. An unauthenticated remote denial-of-service vulnerability in the SLP parser is also present. These vulnerabilities could allow attackers to execute arbitrary code or disrupt services on affected devices. The updates were released on June 2 and June 3, 2026, with critical ratings assigned to the vulnerabilities. Users are urged to apply the patches immediately to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2025-43023 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Vulnerabilities in HPLIP Package Expose Users to Remote Code Execution Risks Multiple critical vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing (HPLIP) package, affecting various Linux distributions, including AlmaLinux and Rocky Linux. These vulnerabilities, including CVE-2026-91104 and CVE-2026-91106, allow for remote code execution and privilege… 
Vulnerabilities in HPLIP Affecting Linux Distros Multiple vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing (HPLIP) software, affecting various Linux distributions including Red Hat Enterprise Linux and Rocky Linux. The vulnerabilities, including CVE-2026-91106, CVE-2026-91097, CVE-2026-91098, and others, allow for remote code…