VulnSocial

CVE-2026-95511Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • False Positive: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-09-22); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-09-22: 3Mentions · 2026-09-28: 1Technical Details · 2026-09-22: 2Technical Details · 2026-09-28: 109-2209-28
Signal classification2 categories
Disclosure
375.0%
False Positive
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-223
Disclosure3
2026-09-281
False Positive1
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-95511 A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure… https://www.cve.org/CVERecord?id=CVE-2026-95511

    Post summary

    The tweet announces CVE-2026-95511, describing a privilege escalation vulnerability in CUPS with the cups‑filters serial backend that could be leveraged by a local lpadmin user, but does not provide a PoC, exploit, patch, or evidence of active exploitation.

    000101.4K
    58.1K followersView on X
  • OS開発者@hacker_infra
    Disclosure

    cupsの脆弱性でCVE-2026-95511が採番された Red hat cve databaseも作成 LPEの緩和策もかいてあるぽい https://access.redhat.com/security/cve/cve-2026-95511

    Post summary

    The tweet announces CVE-2026-95511 for a cups vulnerability and notes that a mitigation exists, linking to the Red Hat advisory.

    01000225
    2.9K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    False Positive

    CVE-2026-95511 CUPS priv esc, CVSS 8.2. lpadmin user can abuse the serial backend to write arbitrary files as root, leading to root RCE. Note: this CVE was REJECTED/WITHDRAWN - verify before acting. Details: https://www.valtersit.com/cve/CVE-2026-95511 #CVE #infosec #CUPS #CUPS #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet describes a CUPS privilege escalation vulnerability but notes that the CVE has been rejected or withdrawn, advising caution.

    0000041
    1.1K followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨HIGH - CUPS cups-filters serial backend arbitrary file write LPE (CVE-2026-95511) In CUPS with cups-filters, an lpadmin user can add a printer using the privileged serial backend and abuse insufficient validation of the path component in non-file device URIs, causing the root-run backend to write attacker-controlled print data to arbitrary files. This enables local priv-esc by overwriting security-sensitive CUPS config and escalating to root code execution when a root-only serial backend binary is present. 👉Affected: cups-filters + cups (serial backend enabled)

    Post summary

    The post discloses CVE‑2026‑95511, a local privilege escalation vulnerability in the CUPS serial backend that allows an lpadmin user to write arbitrary files and gain root access when a root‑only serial backend binary is present. No PoC, exploit code, patch, or evidence of active exploitation is mentioned.

    0000066
    310 followersView on X

Explore more

Back to dashboard