CVE-2026-91105
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components and could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Risk Assessment
The vulnerabilities could allow an attacker to execute arbitrary code, escalate privileges, or disclose data, potentially compromising systems with HPLIP installed. Given HPLIP's widespread use in printing environments, the risk affects many workstations and servers.
Recommendation
Immediately apply the security updates provided by HP for HPLIP. It is also recommended to restrict network access to printing services to trusted network segments only.
Other vulnerabilities in HPLIP
See all- CVE-2026-91106Critical
HP has identified and remediated multiple externally reported vulnerabilities in HPLIP. The vulnerabilities could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91104Critical
HP has identified and remediated multiple externally reported vulnerabilities in HPLIP. The vulnerabilities could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91103Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91102Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91101Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91100Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91099Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91098Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-91097Critical
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
- CVE-2026-14544Critical
A flaw was found in HPLIP (HP Linux Imaging and Printing Software) due to an incomplete fix for CVE-2026-8631. This vulnerability, caused by an integer overflow in the hpcups processing path, may allow a remote attacker to escalate privileges or achieve arbitrary code execution.
Original NVD description (English source)
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

