CVE-2026-91097Patch(hp / linux_imaging_and_printing)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch hp linux_imaging_and_printing systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

hp CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_imaging_and_printing

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
Peaked 2d ago at 1 mentions (2026-09-22); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

Products

linux_imaging_and_printing

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Patch

266.7%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	1	PoC1
2026-10-04	1	Patch1
2026-10-15	1	Patch1

Full discourse3 posts

CyStack@CyStackSecurity23d
Patch
CVE-2026-91098, CVE-2026-91097: Two memory corruption flaws in HP HPLIP, the HP printer and scanner driver suite for Linux. A heap overflow and an out-of-bounds write when parsing attacker-supplied data. No authentication, one user action, and the attacker has a path to code execution on the workstation or print server. Patched in HPLIP 3.26.6. Found by a CyStack researcher. Details at https://cystack.net/disclosures #CyStack #CyberSecurity #Vulnerability #HP #HPLIP #Linux #EnterpriseSecurity #InfoSec
Post summary
The text discloses two memory corruption flaws in HP HPLIP with technical details (heap overflow and OOB write) and confirms they are patched in HPLIP 3.26.6.
0001057
3.7K followersView on X
Nxploited@Nxploited46d
PoC
HPLIP < 3.26.6 CVE-2026-91097 CVE-2026-91098 CVE-2026-91099 CVE-2026-91100 CVE-2026-91101 CVE-2026-91102 CVE-2026-91103 CVE-2026-91104 CVE-2026-91105 CVE-2026-91106 https://github.com/Nxploited/CVE-2026-91097-CVE-2026-91106
Post summary
The post lists multiple HPLIP CVEs affecting versions below 3.26.6 and links to a GitHub repository named with the CVE range, indicating PoC or related code material is being shared. No active exploitation, explicit exploit tooling, or remediation guidance is stated.
00010190
126 followersView on X
Security Arsenal, LLC@SecurityAr5840934d
Patch
🔒 #CyberSecurity Fedora 44 hplip Update Patches 8 CVEs (CVE-2026-91097 to CVE-2026-91105): Unaut… "Fedora has shipped an important security update for the hplip package — HP's Linux Imaging and…" 🔗 https://securityarsenal.com/blog/fedora-44-hplip-update-patches-8-cves-cve-2026-91097-to-cve-2026-91105-unauthenticated-rce-and-privilege-escalation-detection-and-remediation-guide #CyberSecurity #ThreatIntel #critical #zeroday #cve
Post summary
Fedora released a security update for the hplip package that patches eight CVEs, as indicated by the tweet.
0000064
36 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	hp	linux_imaging_and_printing	-	-	-

Explore more

Back to dashboard hp CVEs linux_imaging_and_printing vulnerabilities