kritisch
CVE-2026-91097
hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), AlmaLinux (hoch), Oracle (hoch), Rocky Linux (hoch).
Beschreibung
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 10 | hplip, hplip-common, hplip-libs und 1 weitere | 3.26.6-1.el10_2.3 |
| alma 8 | hplip, hplip-common, hplip-gui und 2 weitere | 3.26.6-3.el8_10 |
| alma 9 | hplip, hplip-common, hplip-libs und 1 weitere | 3.26.6-1.el9_8.3 |
| alpine 3.24 | hplip | 3.26.6-r0 |
| alpine edge | hplip | 3.26.6-r0 |
| debian 11 | hplip | kein Fix angegeben |
| debian 12 | hplip | kein Fix angegeben |
| debian 13 | hplip | kein Fix angegeben |
| debian 14 | hplip | kein Fix angegeben |
| echo | hplip | kein Fix angegeben |
| Oracle Linux 8 | hplip, hplip-common, hplip-gui und 2 weitere | 3.26.6-3.el8_10 |
| Oracle Linux 9 | hplip, hplip-common, hplip-libs und 1 weitere | 3.26.6-1.el9_8.3 |
Alle 78 Einträge aus 31 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 10 | hplip | 3.26.6-1.el10_2.3 |
| alma 10 | hplip-common | 3.26.6-1.el10_2.3 |
| alma 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| alma 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| alma 8 | hplip | 3.26.6-3.el8_10 |
| alma 8 | hplip-common | 3.26.6-3.el8_10 |
| alma 8 | hplip-gui | 3.26.6-3.el8_10 |
| alma 8 | hplip-libs | 3.26.6-3.el8_10 |
| alma 8 | libsane-hpaio | 3.26.6-3.el8_10 |
| alma 9 | hplip | 3.26.6-1.el9_8.3 |
| alma 9 | hplip-common | 3.26.6-1.el9_8.3 |
| alma 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| alma 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| alpine 3.24 | hplip | 3.26.6-r0 |
| alpine edge | hplip | 3.26.6-r0 |
| debian 11 | hplip | kein Fix angegeben |
| debian 12 | hplip | kein Fix angegeben |
| debian 13 | hplip | kein Fix angegeben |
| debian 14 | hplip | kein Fix angegeben |
| echo | hplip | kein Fix angegeben |
| Oracle Linux 8 | hplip | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-common | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-gui | 3.26.6-3.el8_10 |
| Oracle Linux 8 | hplip-libs | 3.26.6-3.el8_10 |
| Oracle Linux 8 | libsane-hpaio | 3.26.6-3.el8_10 |
| Oracle Linux 9 | hplip | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | hplip-common | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| Oracle Linux 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| rapidfort alma 10 | hplip | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | hplip-common | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| rapidfort alma 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| rapidfort alma 9 | hplip | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | hplip-common | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| rapidfort alma 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
| rapidfort alpine 3.20 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.21 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.22 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.23 | hplip | 3.26.6-r0 |
| rapidfort alpine 3.24 | hplip | 3.26.6-r0 |
| rapidfort debian 12 | hplip | kein Fix angegeben |
| rapidfort debian 13 | hplip | kein Fix angegeben |
| rapidfort fedora 43 | hplip | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-common | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-gui | 3.26.6-1.fc43 |
| rapidfort fedora 43 | hplip-libs | 3.26.6-1.fc43 |
| rapidfort fedora 43 | libsane-hpaio | 3.26.6-1.fc43 |
| rapidfort Oracle Linux 10 | hplip | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | hplip-common | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | hplip-libs | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 10 | libsane-hpaio | 0:3.26.6-1.el10_2.3 |
| rapidfort Oracle Linux 9 | hplip | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | hplip-common | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | hplip-libs | 0:3.26.6-1.el9_8.3 |
| rapidfort Oracle Linux 9 | libsane-hpaio | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip-common | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | hplip-libs | 0:3.26.6-1.el9_8.3 |
| rapidfort rocky 9 | libsane-hpaio | 0:3.26.6-1.el9_8.3 |
| rapidfort ubuntu 20.04 | hplip | kein Fix angegeben |
| rapidfort ubuntu 22.04 | hplip | kein Fix angegeben |
| rapidfort ubuntu 24.04 | hplip | kein Fix angegeben |
| Red Hat | hpijs | kein Fix angegeben |
| Red Hat | hplip | kein Fix angegeben |
| Red Hat | hplip-common | kein Fix angegeben |
| Red Hat | hplip-gui | kein Fix angegeben |
| Red Hat | hplip-libs | kein Fix angegeben |
| Red Hat | libsane-hpaio | kein Fix angegeben |
| rocky 10 | hplip | 3.26.6-1.el10_2.3 |
| rocky 10 | hplip-common | 3.26.6-1.el10_2.3 |
| rocky 10 | hplip-libs | 3.26.6-1.el10_2.3 |
| rocky 10 | libsane-hpaio | 3.26.6-1.el10_2.3 |
| rocky 9 | hplip | 3.26.6-1.el9_8.3 |
| rocky 9 | hplip-common | 3.26.6-1.el9_8.3 |
| rocky 9 | hplip-libs | 3.26.6-1.el9_8.3 |
| rocky 9 | libsane-hpaio | 3.26.6-1.el9_8.3 |
Referenzen
- https://access.redhat.com/errata/RHSA-2026:82882
- https://access.redhat.com/security/cve/CVE-2026-91097
- https://bugzilla.redhat.com/2384011
- https://bugzilla.redhat.com/2535600
- https://bugzilla.redhat.com/2535603
- https://bugzilla.redhat.com/2535607
- https://bugzilla.redhat.com/2535613
- https://bugzilla.redhat.com/2535614
Alle 43 Referenzen
- https://bugzilla.redhat.com/2535615
- https://bugzilla.redhat.com/2535617
- https://bugzilla.redhat.com/2535618
- https://bugzilla.redhat.com/2535621
- https://bugzilla.redhat.com/2535622
- https://bugzilla.redhat.com/show_bug.cgi?id=2384011
- https://bugzilla.redhat.com/show_bug.cgi?id=2535600
- https://bugzilla.redhat.com/show_bug.cgi?id=2535603
- https://bugzilla.redhat.com/show_bug.cgi?id=2535607
- https://bugzilla.redhat.com/show_bug.cgi?id=2535613
- https://bugzilla.redhat.com/show_bug.cgi?id=2535614
- https://bugzilla.redhat.com/show_bug.cgi?id=2535615
- https://bugzilla.redhat.com/show_bug.cgi?id=2535617
- https://bugzilla.redhat.com/show_bug.cgi?id=2535618
- https://bugzilla.redhat.com/show_bug.cgi?id=2535621
- https://bugzilla.redhat.com/show_bug.cgi?id=2535622
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43023
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91097
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91098
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91099
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91100
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91101
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91102
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91103
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91104
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91105
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91106
- https://errata.almalinux.org/9/ALSA-2026-82882.html
- https://errata.rockylinux.org/RLSA-2026:82882
- https://linux.oracle.com/cve/CVE-2026-91097.html
- https://linux.oracle.com/errata/ELSA-2026-82883.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-91097
- https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151
- https://www.cve.org/CVERecord?id=CVE-2026-91097