CVE-2026-8631Patch(hp / linux_imaging_and_printing)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch hp linux_imaging_and_printing systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

hp CVEs Back to dashboard

2.3/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118

Other references

Weakness type (CWE)

CWE-122CWE-190

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_imaging_and_printing

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
16 mentions across 9 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 8 signals
Technical details provided in 13 signals
Disclosure: 6 classified signals
Peaked 3d ago at 4 mentions (2026-06-08); latest day: 1
16 total mentions across 9 days

Affected systems

Vendors

Products

linux_imaging_and_printing

Deep dive

Activity timeline16 mentions / 9d

Signal classification4 categories

Patch

850.0%

Disclosure

637.5%

PoC

16.3%

General

16.3%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-21	2	Disclosure1Patch1
2026-05-22	3	Patch2PoC1
2026-05-23	1	Disclosure1
2026-06-02	1	Patch1
2026-06-05	1	Patch1
2026-06-08	4	Disclosure1General1Patch2
2026-07-03	2	Disclosure2
2026-07-06	1	Patch1
2026-07-09	1	Disclosure1

Full discourse16 posts

Wazuh@wazuh128d
Patch
HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631 (CVSS 9.8), a critical integer overflow flaw that may allow privilege escalation or arbitrary code execution via crafted print data. Affects versions <3.26.4, patch now. Read on: https://ow.ly/uF2z50Z6igG https://t.co/7v9B8gDT7q
Post summary
HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631, a critical integer overflow flaw that could allow privilege escalation or arbitrary code execution. A patch is now available.
080163691
8.1K followersView on X
Gray Hats@the_yellow_fall139d
Patch
HP patches critical 9.3 CVSS flaw CVE-2026-8631 in HPLIP drivers. Unauthenticated attackers can bypass memory limits for Linux remote code execution. #LinuxSecurity #HPLIP #CVE20268631 #PrinterExploit #SysAdmin #InfoSec #CyberSecurity #VulnerabilityAlert https://securityonline.info/hp-linux-driver-hplip-vulnerabilities-cve-2026-8631-rce/ https://t.co/eB22xccMeT
Post summary
HP released a patch for CVE-2026-8631, a critical RCE flaw in HPLIP drivers that lets unauthenticated attackers bypass memory limits.
03094698
12.5K followersView on X
Open Source Security mailing list@oss_security138d
Disclosure
HPLIP: Potential Escalation of Privilege and Arbitrary Code Execution https://www.openwall.com/lists/oss-security/2026/05/23/1 HP Linux Imaging and Printing Software may allow escalation of privileges and/or arbitrary code execution via CVE-2026-8632 command injection or CVE-2026-8631 CVSS 9.3 buffer overflow
Post summary
The post announces two high‑severity vulnerabilities (CVE-2026-8632 command injection and CVE-2026-8631 buffer overflow) in HP Linux Imaging and Printing software, providing technical details but no PoC, exploit code, patch information, or evidence of current exploitation.
04061733
4.7K followersView on X
Autumn Good@autumn_good_35140d
Patch
CVE-2026-8631 CVE-2026-8632 HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution | HP® Support https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118
Post summary
HP’s support advisory lists CVE-2026-8631 and CVE-2026-8632 as potential privilege escalation and arbitrary code execution issues for Linux Imaging and Printing Software, but the excerpt does not detail exploitation methods, active use, or patch specifics.
01010360
6.9K followersView on X
Lyrie.ai@lyrie_ai122d
Patch
Full Tweet HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631 (CVSS 9.8), a critical integer overflow flaw that may allow privilege escalation or arbitrary code execution via crafted print data. Affects versions &lt;3.26.4, patch now.
Post summary
HP’s HPLIP software has a critical integer overflow (CVE‑2026‑8631) that could lead to privilege escalation or code execution; a patch is now available for affected versions.
1000036
258 followersView on X
Lyrie.ai@lyrie_ai122d
Disclosure
0day Intel: HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631 (CVS
Post summary
A new CVE-2026-8631 affecting HP Linux Imaging and Printing Software (HPLIP) has been announced, but no exploitation details or mitigation guidance are provided.
1000051
258 followersView on X
Lyrie.ai@lyrie_ai122d
General
Source: X search for CVE-2026 critical Posted: 2026-06-02T11:00:40.000Z Likes: 11 0day Intel: HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631 (CVS
Post summary
The tweet identifies HP Linux Imaging and Printing Software as affected by CVE-2026-8631 but offers no further details, exploitation evidence, or patch information.
1000041
258 followersView on X
Lyrie.ai@lyrie_ai122d
Patch
CVE-2026-8631: HP Linux Imaging and Printing Software (HPLIP) is affected by CVE-2026-8631 (CVSS 9.8), a critical integer overflow flaw that may allow privilege escalation or arbitrary code execution via crafted print data. Affects versions &lt;3.26.4, patch now. Read on:…
Post summary
The announcement informs about CVE-2026-8631, a high‑severity integer overflow in HPLIP, and confirms that a patch is now available.
1000049
258 followersView on X
Rıdvan Yağlı@ridvanyagli91d
Disclosure
🔴 HP'nin Linux yazdırma yazılımı HPLIP'te kritik bir RCE açığı tespit edildi! HPLIP'te bulunan CVE-2026-14544 (CVSS 9.8) açığı, hpcups bileşenindeki integer overflow hatası nedeniyle saldırganların kötü amaçlı hazırlanmış bir print job göndererek hedef sistemde uzaktan keyfi kod çalıştırmasına (RCE) olanak tanıyabiliyor. Açık, kimlik doğrulaması veya kullanıcı etkileşimi gerektirmiyor ve daha önce giderildiği düşünülen CVE-2026-8631 açığı için yayınlanan düzeltmenin eksik uygulanmasından kaynaklanıyor. Etkilenen sistemler arasında RHEL 8, RHEL 9 ve RHEL 10 bulunuyor. Özellikle ağ üzerinden erişilebilen yazdırma sunucuları risk altında.
Post summary
HP’s HPLIP printer software has a critical integer‑overflow RCE (CVE‑2026‑14544) that allows unauthenticated remote code execution on RHEL 8‑10 servers.
00000171
1.2K followersView on X
DFIR Lab@DFIR_Lab94d
Patch
🚨 CRITICAL: CVE-2026-14544 in HP Linux Imaging & Printing Software (HPLIP) - CVSS 9.8 Incomplete fix for CVE-2026-8631. Integer overflow enables remote code execution via crafted print data. Patch immediately. #CVE #PatchNow https://t.co/E4POz3KEW8
Post summary
The tweet alerts to a critical CVE-2026-14544 (and an incomplete fix for CVE-2026-8631), describing an integer overflow that enables remote code execution via crafted print data, and urges users to patch immediately.
0000045
64 followersView on X
Upwind Security MDR@UpwindMDR97d
Disclosure
🚨 CRITICAL - HPLIP hpcups integer overflow in print data processing (CVE-2026-14544) CVE-2026-14544 is a critical flaw in HPLIP’s hpcups print processing path (HP’s CUPS filter/driver stack) triggered by specially crafted print data. The underlying issue is an integer overflow due to incorrect bounds/size handling, noted as an incomplete fix for CVE-2026-8631. An attacker can exploit this by sending a malicious print job to a system using hpcups (e.g., via network printing to a shared printer/queue), requiring only the ability to submit print data to the affected pipeline. Successful exploitation can lead to arbitrary code execution in the printing context and potentially privilege escalation to root depending on how the filter is invoked by the spooler. 👉 Affected: hplip (versions with the incomplete CVE-2026-8631 fix; exact range pending vendor advisory) | Upgrade to vendor-fixed release (not yet specified — treat as suspicious)
Post summary
The post announces a critical integer‑overflow flaw in HPLIP’s hpcups that can be exploited via crafted print jobs, with an upcoming vendor patch expected.
0000097
236 followersView on X
ThreatAft@ThreatAft97d
Disclosure
🚨 CRITICAL: CVE-2026-14544 — HPLIP Incomplete Patch Bypass CVSS 9.8. Integer overflow in hpcups enables remote privilege escalation. Original CVE-2026-8631 fix was incomplete. Affects millions of Linux endpoints. 🔗 https://threataft.com/articles/cve-2026-14544-hplip-incomplete-patch-bypass #CyberSecurity #ThreatIntel #Linux
Post summary
The text announces a critical HPLIP vulnerability (CVE-2026-14544) with an integer overflow that allows remote privilege escalation, but it does not report active exploitation, PoC, or patch information.
0000067
31 followersView on X
ThreatCluster@threatcluster126d
Patch
SUSE released security fixes for hplip to address CVE-2025-43023, CVE-2026-8631 and CVE-2026-8632 enabling code execution and DoS on HP printing systems, LinuxSecurity reported. https://threatcluster.io/cluster/critical-vulnerabilities-in-suse-hplip-affecting-multiple-sy-07741f15
Post summary
SUSE has issued fixes for three critical hplip CVEs that enable code execution and DoS on HP printers, with no evidence of active exploitation or PoC sharing.
0000052
311 followersView on X
Israel@f1tym1139d
PoC
Print-Path RCE Exposed: Critical HP Linux Driver Flaws (CVE-2026-8631) Grant Root Privileges https://ift.tt/AVkOIcL The post Print-Path RCE Exposed: Critical HP Linux Driver Flaws (CVE-2026-8631) Grant Root Privileges appeared first on Daily CyberSecurity. Related posts: To…
Post summary
The post announces an RCE flaw in HP Linux drivers (CVE-2026-8631) and provides a link that likely contains a proof‑of‑concept, but does not mention an active exploitation, patch, or false‑positive claim.
0000065
981 followersView on X
DFIR Lab@DFIR_Lab140d
Patch
🚨 CRITICAL: CVE-2026-8631 | CVSS 9.8 HP Linux Imaging & Printing Software vulnerable to RCE via integer overflow in hpcups. Network exploitable, no auth required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/msv7wHt7lc
Post summary
The tweet announces a critical CVE (CVE‑2026‑8631) affecting HP Linux Imaging & Printing Software, provides technical details of the RCE vulnerability, and urges users to apply a patch immediately.
0000069
30 followersView on X
VulDB 🛡@vuldb140d
Disclosure
A new vulnerability with increased severity was disclosed for HP Linux Imaging and Printing Software (CVE-2026-8631) https://vuldb.com/vuln/364962
Post summary
A new vulnerability, CVE-2026-8631, has been disclosed for HP Linux Imaging and Printing Software with an increased severity score, but the post lacks technical or remedial details.
0000084
2.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	hp	linux_imaging_and_printing	-	-	-

Explore more

Back to dashboard hp CVEs linux_imaging_and_printing vulnerabilities

What researchers are saying

CVE-2026-8631

Lyrie.ai[verified]@lyrie_aiPatch

HP’s HPLIP software has a critical integer overflow (CVE‑2026‑8631) that could lead to privilege escalation or code execution; a patch is now available for affected versions.

Lyrie.ai[verified]@lyrie_aiDisclosure

A new CVE-2026-8631 affecting HP Linux Imaging and Printing Software (HPLIP) has been announced, but no exploitation details or mitigation guidance are provided.

Lyrie.ai[verified]@lyrie_aiGeneral

The tweet identifies HP Linux Imaging and Printing Software as affected by CVE-2026-8631 but offers no further details, exploitation evidence, or patch information.

Lyrie.ai[verified]@lyrie_aiPatch

The announcement informs about CVE-2026-8631, a high‑severity integer overflow in HPLIP, and confirms that a patch is now available.

Rıdvan Yağlı[verified]@ridvanyagliDisclosure

HP’s HPLIP printer software has a critical integer‑overflow RCE (CVE‑2026‑14544) that allows unauthenticated remote code execution on RHEL 8‑10 servers.

DFIR Lab[verified]@DFIR_LabPatch

The tweet alerts to a critical CVE-2026-14544 (and an incomplete fix for CVE-2026-8631), describing an integer overflow that enables remote code execution via crafted print data, and urges users to patch immediately.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The post announces a critical integer‑overflow flaw in HPLIP’s hpcups that can be exploited via crafted print jobs, with an upcoming vendor patch expected.

ThreatCluster[verified]@threatclusterPatch

SUSE has issued fixes for three critical hplip CVEs that enable code execution and DoS on HP printers, with no evidence of active exploitation or PoC sharing.