CVE-2026-107655CWE-476

CVE-2026-107655

Medium · published October 9, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00128 · 2.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-10-09T13:17Z
References (7)
https://access.redhat.com/errata/RHSA-2026:80679 · [email protected]https://access.redhat.com/security/cve/CVE-2026-107655 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2548399 · [email protected]https://github.com/OpenPrinting/cups/commit/12237ad · [email protected]https://github.com/OpenPrinting/cups/commit/25d6830 · [email protected]https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78 · [email protected]https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 10 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 09 OCT 08:55Z
    Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
    cvelistv5
  • 09 OCT 08:55Z
    Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
    cvelistv5