CVE Catalog

CVE-2026-14544

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.61%

45th percentile - higher than 45% of all known CVEs

Summary

A flaw was found in HPLIP (HP Linux Imaging and Printing Software) due to an incomplete fix for CVE-2026-8631. This vulnerability, caused by an integer overflow in the hpcups processing path, may allow a remote attacker to escalate privileges or achieve arbitrary code execution.

Risk Assessment

The organization is at risk of remote attackers gaining control over the system, potentially leading to data theft, malware installation, or further attacks on the infrastructure.

Recommendation

Immediately update HPLIP to the latest version containing the complete fix. If an update is not possible, restrict access to printing services to trusted hosts only.

Original NVD description (English source)

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS