HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
CVSS Details
- CVSS 4.0 Base Score: 8.4 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade hplip-guiUpgrade libsane-hpaioUpgrade hplipUpgrade hplip-commonUpgrade hplip-libs | Oct 18, 2026 | Oct 14, 2026 |
| Alpine Linux | — | Upgrade hplip | Oct 20, 2026 | Sep 16, 2026 |
| Oracle_linux | — | Upgrade hplip-libsUpgrade hplip-commonUpgrade hplipUpgrade libsane-hpaioUpgrade hplip-gui | Oct 22, 2026 | Sep 16, 2026 |
| Redhat_linux | — | Upgrade hplip-commonNo solution existsUpgrade hplip-libs-debuginfoUpgrade hplip-libsUpgrade hplip-debuginfoUpgrade libsane-hpaio-debuginfoUpgrade libsane-hpaioUpgrade hplip-debugsourceUpgrade hplip-guiUpgrade hplip | Sep 18, 2026 | Sep 16, 2026 |
| Rocky_linux | — | Upgrade hplipUpgrade hplip-debugsourceUpgrade libsane-hpaioUpgrade libsane-hpaio-debuginfoUpgrade hplip-libsUpgrade hplip-libs-debuginfoUpgrade hplip-debuginfoUpgrade hplip-common | Oct 19, 2026 | Oct 15, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub