Skip to main content

Ubuntu Linux EUVDEUVD-2026-102205

| CVE-2026-55480 MEDIUM
Improper Link Resolution Before File Access (CWE-59)
2026-10-06 vendor:ubuntu
5.7
CVSS 3.1 · Vendor: vendor:ubuntu
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Insufficient data to construct attack chain
  2. Exploit
    verify CVE details with Ubuntu/NVD
  3. Impact
    reassess

Vulnerability Assessment

Weakness
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Symlink resolution safety
Exploitation Conditions

Cannot be determined - the CVE description is '[Unknown description]' and no CVSS vector is supplied, so no product feature, protocol, configuration setting, deployment mode, authentication level, or user-interaction requirement can be identified. Defenders must retrieve the entry from the Ubuntu CVE tracker and NVD to establish prerequisites and limiting factors.

Impact

Risk cannot be meaningfully assessed from the supplied data. The only intelligence signal is a source attribution (vendor:ubuntu); the description is '[Unknown description]', and there is no CVSS score, no CVSS vector, no CWE, no EPSS probability, no SSVC decision data, no KEV listing, and no POC indicator. With no attack vector, complexity, or privilege data, it is impossible to say whether this is a genuine priority or a high-CVSS-but-low-real-risk issue. Exploitation status is 'no public exploit identified at time of analysis' (neither KEV nor POC present in input). Explicit gaps: the vulnerability class, affected package, attack vector, and impact are all MISSING and must be verified against the Ubuntu Security tracker (USN/CVE page) and NVD before any prioritization decision is made.

Exploit ScenarioDerived

No exploit scenario can be constructed because the vulnerability description, affected component, and attack vector are all absent from the provided data. No POC is indicated in the input. Any scenario offered here would be fabrication rather than analysis.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Oct 06, 2026

CVE-2026-55480 is currently recorded only against Ubuntu Linux, with the sole intelligence signal being that the entry was reported by vendor:ubuntu, meaning Canonical's security team is the originating source for the record. The supplied data contains no description, no CVSS score or vector, no CWE classification, no CPE strings, and no version ranges, so the specific component, attack vector, authentication requirement, and impact cannot be characterized at this time. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but this reflects the absence of data rather than a confirmed negative - defenders should treat the entry as unassessed and pull the authoritative record from the Ubuntu CVE tracker and NVD before drawing any risk conclusion.

RemediationAI

No vendor-released patch was identified in the available intelligence, and patch status cannot be confirmed from the supplied data - this is an information gap, not evidence that no fix exists. The immediate action is to retrieve the authoritative record from the Ubuntu CVE tracker at https://ubuntu.com/security/CVE-2026-55480 and the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-55480, then follow the per-release status table to determine which of your Ubuntu versions require action and the exact fixed package versions once published. Ensure the security pockets are enabled and that unattended-upgrades is active on Ubuntu hosts so Canonical security updates are applied automatically as they land; the trade-off is that automatic upgrades can restart services or require reboots for kernel updates, so schedule maintenance windows for kernel-class fixes. Subscribe to the Ubuntu Security Notices feed (https://ubuntu.com/security/notices) or the ubuntu-security-announce mailing list to be alerted when the corresponding USN is issued, since that advisory - not this record - will carry the package-specific remediation. Because the affected component is unknown, targeted compensating controls such as disabling a specific service, blocking a port, or restricting an endpoint cannot yet be prescribed without guessing; until the component is identified, prioritise asset inventory accuracy (knowing which packages and versions you actually run) and host-level detection coverage over speculative hardening, and revisit exposure the moment the tracker entry is populated.

Affected VersionsENISA

cups < 2.4.20

Affected Packages

euvd cups fix: 2.4.20

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The root cause class is unknown because no CWE identifier accompanies this record, and the underlying technology cannot be inferred: there are no CPE strings, no package names, and no component references in the supplied intelligence. CVE-2026-55480 follows the standard CVE identifier scheme, with the 2026 sequence number indicating a recent assignment, and the reporting attribution to vendor:ubuntu indicates that Canonical either discovered the issue, acted as the coordinating CNA, or is the primary downstream distributor affected. In the Ubuntu ecosystem, entries like this are typically tracked in the Canonical CVE database (ubuntu.com/security/CVE-2026-55480) and, once triaged, are accompanied by a per-release status table (released, needed, deferred, not-affected) and a USN advisory identifier when patched packages are published. Until that record is populated, no reliable statement can be made about whether the flaw sits in the Linux kernel, a userspace package, a Snap, or a Canonical-maintained service, nor whether exploitation requires local access, network reachability, or user interaction.

Know when Cups gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources

No credit card · 7-day full trial

Severity by source

Vendor (vendor:ubuntu) PRIMARY 5.7 MEDIUM
AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Primary rating from Vendor (vendor:ubuntu) · only source for this CVE.

CVSS VectorVendor: vendor:ubuntu

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
Patch available
Oct 15, 2026 - 18:18 EUVD

DescriptionCVE.org

[Unknown description]

Threat Intelligence Overview

EPSS Score
0.2%
Top 96% exploitable
Data Quality
5 sources
Confidence: Medium

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV No
Public POC No
EPSS 0.2%
Patch available Yes
Active threat No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact· derived
Medium

Priority Score

28
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +28
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in Cups

View all
CVE-2015-1158 CRITICAL POC
10.0 Jun 26

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-va

CVE-2015-1159 MEDIUM POC
4.3 Jun 26

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS b

CVE-2012-5519 HIGH POC
7.2 Nov 20

CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator

CVE-2023-34241 HIGH POC
7.1 Jun 22

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Rat

CVE-2023-4504 HIGH POC
7.0 Sep 21

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are sus

CVE-2025-61915 MEDIUM POC
6.7 Nov 29

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Rated medium severi

CVE-2025-58364 MEDIUM POC
6.5 Sep 11

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Rated medium severi

CVE-2025-58436 MEDIUM POC
5.5 Nov 29

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Rated medium severi

CVE-2023-32324 MEDIUM POC
5.5 Jun 01

OpenPrinting CUPS is an open source printing system. Rated medium severity (CVSS 5.5), this vulnerability is no authenti

CVE-2018-6553 HIGH
8.8 Aug 10

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. Rated high severity (CVSS 8.8

CVE-2014-9679 MEDIUM
6.8 Feb 19

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers t

CVE-2022-26691 MEDIUM
6.7 May 26

A logic issue was addressed with improved state management. Rated medium severity (CVSS 6.7), this vulnerability is low

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy