CVE-2026-91097CWE-787

CVE-2026-91097

Critical · published September 16, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
7.0 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.01010 · 62.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-09-16T23:18Z
Affected products (1)
ProductVersionsFixed in
hp/linux_imaging_and_printing< 3.26.63.26.6
References (1)
https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 · [email protected]
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 1%
    epss
  • 16 SEP 18:39Z
    HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
    cvelistv5