CVE-2026-95511

CVE-2026-95511

published September 22, 2026

CVSS
8.2
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.9th percentile
Published
2026-09-22T13:17Z
EPSS history
Timeline
  • 23 SEP 03:49Z
    EPSS moved — → 0%
    epss
  • 22 SEP 08:35Z
    Cups: cups-filters: cups-filters: lpadmin can escalate to root via privileged serial backend (cups2root)
    cvelistv5