{"id":"CVE-2026-91105","state":"PUBLISHED","title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","description":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.","publishedAt":"2026-09-16T18:54:53.213Z","updatedAt":"2026-09-17T11:39:24.037Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"hp"},"assigner":"hp","products":["HP Inc. HP Linux Imaging and Printing Software (HPLIP)"],"affected":[{"vendor":"HP Inc.","product":"HP Linux Imaging and Printing Software (HPLIP)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"3.26.6","versionType":"custom"}],"platforms":["Linux"]}],"references":["https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/91xxx/CVE-2026-91105.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-91105","state":"PUBLISHED","datePublished":"2026-09-16T18:54:53.213Z","dateUpdated":"2026-09-17T11:39:24.037Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2026-09-14T19:13:23.919Z"},"containers":{"cna":{"title":"HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities","descriptions":[{"lang":"en","value":"HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions."}],"affected":[{"vendor":"HP Inc.","product":"HP Linux Imaging and Printing Software (HPLIP)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"3.26.6","versionType":"custom"}],"platforms":["Linux"]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":8.6,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","lang":"en","description":"CWE-122 Heap-based buffer overflow","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2026-09-16T18:54:53.213Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp_inc.:hp_linux_imaging_and_printing_software_hplip_:*:*:linux:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"3.26.6"}]}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-91105","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T03:57:31.958240Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T11:39:24.037Z"}}]}}}