by Kastro
Paper/Archive/CVE-2026-14544

CVE-2026-14544

HP HPLIP — Hplip: incomplete fix for cve-2026-8631

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.2.682 × 2013.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.

Affected

ProductAffectedFixed inSource
HPLIPall versions–CNA
Red Hat Enterprise Linux 10see advisory0:3.23.12-10.el10_2.5CNA
Red Hat Enterprise Linux 8see advisory0:3.18.4-14.el8_10CNA
Red Hat Enterprise Linux 9see advisory0:3.21.2-6.el9_8.5CNA
Red Hat Enterprise Linux 6see advisory–CNA
Red Hat Enterprise Linux 7see advisory–CNA

Scores by source

redhat (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2026:39976advisoryaccess.redhat.com/errata/RHSA-2026:40831advisoryaccess.redhat.com/errata/RHSA-2026:40894refaccess.redhat.com/security/cve/CVE-2026-14544refbugzilla.redhat.com/show_bug.cgi?id=2496772