VulnSocial

CVE-2026-91098PoC(hp / linux_imaging_and_printing)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch hp linux_imaging_and_printing systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

hp CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_imaging_and_printing

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-09-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
hp
Products
linux_imaging_and_printing

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-22: 1Mentions · 2026-10-15: 1PoC Mentioned / Linked · 2026-09-22: 1Patch / Workaround · 2026-09-22: 1Patch / Workaround · 2026-10-15: 1Technical Details · 2026-10-15: 109-2210-15
Signal classification2 categories
PoC
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-221
PoC1
2026-10-151
Patch1
Full discourse2 posts
  • CyStack@CyStackSecurity
    Patch

    CVE-2026-91098, CVE-2026-91097: Two memory corruption flaws in HP HPLIP, the HP printer and scanner driver suite for Linux. A heap overflow and an out-of-bounds write when parsing attacker-supplied data. No authentication, one user action, and the attacker has a path to code execution on the workstation or print server. Patched in HPLIP 3.26.6. Found by a CyStack researcher. Details at https://cystack.net/disclosures #CyStack #CyberSecurity #Vulnerability #HP #HPLIP #Linux #EnterpriseSecurity #InfoSec

    Post summary

    The text reports two memory corruption CVEs in HP HPLIP for Linux with technical details (heap overflow, out-of-bounds write) and confirms a patch in HPLIP 3.26.6, with no exploit tools, PoC, or active exploitation mentioned.

    0001057
    3.7K followersView on X
  • Nxploited@Nxploited
    PoC

    HPLIP < 3.26.6 CVE-2026-91097 CVE-2026-91098 CVE-2026-91099 CVE-2026-91100 CVE-2026-91101 CVE-2026-91102 CVE-2026-91103 CVE-2026-91104 CVE-2026-91105 CVE-2026-91106 https://github.com/Nxploited/CVE-2026-91097-CVE-2026-91106

    Post summary

    The text discloses a set of CVEs affecting HPLIP versions prior to 3.26.6 and primarily shares a GitHub repository link containing Proof of Concept code for the vulnerabilities.

    00010190
    126 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apphplinux_imaging_and_printing---

Explore more

Back to dashboardhp CVEslinux_imaging_and_printing vulnerabilities