OS開発者@hacker_infra
cupsの脆弱性でCVE-2026-95511が採番された Red hat cve databaseも作成 LPEの緩和策もかいてあるぽい https://access.redhat.com/security/cve/cve-2026-95511
01000121
2.9K followersView on X
CVE-2026-95511
LOWSignal is active with 2 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.
0.0/ 10 priority
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 2 mentions across 1 observed day
What's happening
- 2 total mentions across 1 day
Deep dive
Activity timeline2 mentions / 1d
Referenced assets1 URL
Full discourse2 posts
Upwind Security MDR@UpwindMDR🚨HIGH - CUPS cups-filters serial backend arbitrary file write LPE (CVE-2026-95511) In CUPS with cups-filters, an lpadmin user can add a printer using the privileged serial backend and abuse insufficient validation of the path component in non-file device URIs, causing the root-run backend to write attacker-controlled print data to arbitrary files. This enables local priv-esc by overwriting security-sensitive CUPS config and escalating to root code execution when a root-only serial backend binary is present. 👉Affected: cups-filters + cups (serial backend enabled)
0000024304 followersView on X