VulDB 🛡@vuldb
🚨 A lot of offensive activities were identified targeting OpenPrinting CUPS (CVE-2026-107886) vuldb.com/vuln/415711/cti https://t.co/Mlz1PvcyXv
0000181
2.3K followersView on X
CVE-2026-107886
LOWCVSS 2.3 · LOWSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-415
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day