{"id":"CVE-2026-91103","state":"PUBLISHED","title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","publishedAt":"2026-09-16T18:52:28.148Z","updatedAt":"2026-09-17T13:41:06.632Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"hp"},"assigner":"hp","products":["HP Inc. HP Linux Imaging and Printing Software (HPLIP)"],"affected":[{"vendor":"HP Inc.","product":"HP Linux Imaging and Printing Software (HPLIP)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"3.26.6","versionType":"custom"}],"platforms":["Linux"]}],"references":["https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151"],"weaknesses":["CWE-191"],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/91xxx/CVE-2026-91103.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-91103","state":"PUBLISHED","datePublished":"2026-09-16T18:52:28.148Z","dateUpdated":"2026-09-17T13:41:06.632Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2026-09-14T19:13:23.919Z"},"containers":{"cna":{"title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","descriptions":[{"lang":"en","value":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions."}],"affected":[{"vendor":"HP Inc.","product":"HP Linux Imaging and Printing Software (HPLIP)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"3.26.6","versionType":"custom"}],"platforms":["Linux"]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":5.1,"vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-191","lang":"en","description":"CWE-191 Integer underflow (wrap or wraparound)","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2026-09-16T18:52:28.148Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp_inc.:hp_linux_imaging_and_printing_software_hplip_:*:*:linux:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"3.26.6"}]}]}],"credits":[{"lang":"en","value":"Nir Yehoshua, Cipher Security Labs","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-91103","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T11:56:30.532852Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T13:41:06.632Z"}}]}}}