EUVD-2026-81001
GHSA-8j52-r29c-rv2m
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector and required user interaction (AV:L/UI:R) per vendor UI:A; PR:N as no prior privileges needed; command injection yields full C/I/A:H in an unchanged scope.
Primary rating from Vendor (hp).
CVSS VectorVendor: hp
Lifecycle Timeline
4DescriptionCVE.org
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
AnalysisAI
Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitrary operating-system commands with the privileges of the affected HPLIP component, resulting in high confidentiality, integrity, and availability impact (vendor CVSS 4.0 base 8.4) and spanning remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification. Exploitation is not remote: it requires local access to a Linux host that has HPLIP installed and in use, and it requires active user interaction, typically by inducing a legitimate user to feed attacker-controlled input into a vulnerable HPLIP component that builds an OS command (CWE-78). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires LOCAL access to a host running HP's HPLIP software with associated HP imaging/printing hardware or services (AV:L), plus active user interaction (UI:A) - the attacker must either be a local user or induce a legitimate user to perform an action that feeds attacker-controlled input into a vulnerable HPLIP component that constructs an OS command (CWE-78). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 4.0 score of 8.4 is driven by high confidentiality, integrity, and availability impact (VC:H/VI:H/VA:H), but the vector itself moderates the real-world risk: AV:L means this is a LOCAL attack vector, not remote, and UI:A requires active user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: HP has identified and remediated these HPLIP vulnerabilities, and the authoritative fix guidance, affected component list, and any corrected package versions are published in HP Security Bulletin HPSBPI04151 (https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151); apply the HP-provided HPLIP update for your distribution and re-verify the installed version against that bulletin, since exact fix version numbers are not enumerated in the data available here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Linux host running HPLIP and determine which systems actually need printing services, confirm whether the HPLIP component referenced in HP advisory HPSBPI04151 is present, and isolate or restrict interactive and local access on any Linux host where printing is not a business requirement (disable or stop the HPLIP/cups-related services and remove the hplip package from non-printing servers). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Heap-based buffer overflow (CWE-122) in HP's HPLIP - the HP Linux Imaging and Printing Software stack shipped as the def
Heap-based buffer overflow and related memory-safety flaws in HP Linux Imaging and Printing (HPLIP) can allow remote cod
HPLIP (HP Linux Imaging and Printing Software) is affected by multiple heap-based buffer overflow vulnerabilities (CWE-1
Heap-based buffer overflows and related memory-safety flaws in HPLIP (HP Linux Imaging and Printing Software) let remote
Out-of-bounds write flaws in HPLIP (HP Linux Imaging and Printing Software) can corrupt memory when a user processes att
Command injection (CWE-78) in HP's HPLIP (HP Linux Imaging and Printing) software enables an unauthenticated local user
Denial of service in HP's HPLIP (HP Linux Imaging and Printing Software) printing stack is reachable when a physically-p
Denial of service in HP Linux Imaging and Printing Software (HPLIP) can be triggered by a physically present attacker wh
Local attackers with valid credentials on Linux systems running HPLIP can exploit symbolic-link handling flaws (CWE-61)
Same weakness CWE-78 – OS Command Injection
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today