CVE-2026-91103CWE-191

CVE-2026-91103

Critical · published September 16, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
5.1 · CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00965 · 61.3th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-09-16T23:18Z
Affected products (1)
ProductVersionsFixed in
hp/linux_imaging_and_printing< 3.26.63.26.6
References (1)
https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151 · [email protected]
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 18:52Z
    HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
    cvelistv5