Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-16T18:45:51 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CWE-266

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

A flaw was found in HPLIP (HP Linux Imaging and Printing) software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service (DoS), disclose sensitive information, or modify files without authorization under certain conditions.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Fix deferred hplip Red Hat Enterprise Linux 6 Out of support scope hplip Red Hat Enterprise Linux 7 Fix deferred hplip Red Hat Enterprise Linux 8 Fix deferred hplip Red Hat Enterprise Linux 9 Fix deferred hplip https://www.cve.org/CVERecord?id=CVE-2026-91099 https://nvd.nist.gov/vuln/detail/CVE-2026-91099 https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151