Bug 2535600 (CVE-2026-91099) - CVE-2026-91099 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation
Summary: CVE-2026-91099 hplip: HPLIP: Multiple vulnerabilities enabling local code exe...
Keywords:
Status: NEW
Alias: CVE-2026-91099
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2535839
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-16 18:52 UTC by OSIDB Bzimport
Modified: 2026-10-14 15:18 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:82295 0 None None None 2026-10-13 15:07:25 UTC
Red Hat Product Errata RHSA-2026:82882 0 None None None 2026-10-14 15:10:29 UTC
Red Hat Product Errata RHSA-2026:82883 0 None None None 2026-10-14 15:18:02 UTC

Description OSIDB Bzimport 2026-09-16 18:52:08 UTC 
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
Comment 2 Jon Orris 2026-10-13 15:07:24 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:82295 https://access.redhat.com/errata/RHSA-2026:82295
Comment 3 Jon Orris 2026-10-14 15:10:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:82882 https://access.redhat.com/errata/RHSA-2026:82882
Comment 4 Jon Orris 2026-10-14 15:18:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:82883 https://access.redhat.com/errata/RHSA-2026:82883
Note You need to log in before you can comment on or make changes to this bug.