CVE-2026-91102CWE-78command-injection
CVE-2026-91102
Critical · published September 16, 2026
What it is
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
The record
Technical detail
- CVSS v3.1
- 9.8 · CRITICAL
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- 8.4 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00792 · 55.9th percentile
- Weakness
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Published
- 2026-09-16T23:18Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| hp/linux_imaging_and_printing | < 3.26.6 | 3.26.6 |
References (1)
EPSS history
Timeline