CVE-2026-39316

Medium

Published: —Translated: 09/06/2026(UTC)NVD NIST

Summary

In OpenPrinting CUPS, versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler (cupsd) when temporary printers are automatically deleted.

Risk Assessment

This vulnerability may lead to unauthorized access or system crashes, threatening the integrity and availability of printing services within the organization.

Recommendation

It is recommended to update the CUPS system to the latest version to mitigate this vulnerability and to monitor logs for potential abuse.

Original NVD description (English source)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler (cupsd) when temporary printers are automatically deleted. cupsdDeleteTemporaryPrinters() in scheduler/printe