Is CVE-2026-14544 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-14544 being exploited in the wild.

How severe is CVE-2026-14544?

Critical severity, with a CVSS score of 9.8, published 3 July 2026.

Which products and versions are affected?

HPLIP All versions prior to the fix for CVE-2026-14544; Red Hat Enterprise Linux 10 affected; Red Hat Enterprise Linux 8 affected; Red Hat Enterprise Linux 9 affected.

Is there a fix for CVE-2026-14544?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-14544 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-14544?

Check whether you run HPLIP, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-14544: HP HPLIP integer overflow in hpcups processing path

CVE-2026-14544 · Severity: critical · CVSS 9.8 · Published 2026-07-03

A vulnerability has been identified in the HP Linux Imaging and Printing (HPLIP) software, which is used to manage printing and scanning on Linux systems. An attacker could exploit this flaw by sending specially crafted print data to a system, potentially allowing them to take full control of the computer or gain elevated administrative privileges. This issue is particularly significant as it represents an incomplete fix for a previously reported security flaw, leaving systems vulnerable to unauthorized access and data compromise.

Technologies: HPLIP, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9. Vendors: Hp, Red Hat.

Quick answers

Is CVE-2026-14544 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-14544 being exploited in the wild.
How severe is CVE-2026-14544?: Critical severity, with a CVSS score of 9.8, published 3 July 2026.
Which products and versions are affected?: HPLIP All versions prior to the fix for CVE-2026-14544; Red Hat Enterprise Linux 10 affected; Red Hat Enterprise Linux 8 affected; Red Hat Enterprise Linux 9 affected.
Is there a fix for CVE-2026-14544?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-14544 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-14544?: Check whether you run HPLIP, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as an integer overflow (CWE-190) exists within the hpcups processing path of the HP Linux Imaging and Printing (HPLIP) software. This flaw is an incomplete fix for a previous vulnerability (CVE-2026-8631). A remote, unauthenticated attacker can exploit this by submitting specially crafted print data to the affected system. Successful exploitation can lead to arbitrary code execution or local privilege escalation. The vulnerability affects multiple versions of Red Hat Enterprise Linux (8, 9, and 10) where HPLIP is deployed. Users are advised to monitor vendor advisories for updated packages.

Affected products

HP HPLIP (HP Linux Imaging and Printing Software) All versions prior to the fix for CVE-2026-14544
Red Hat Red Hat Enterprise Linux 8 affected
Red Hat Red Hat Enterprise Linux 9 affected
Red Hat Red Hat Enterprise Linux 10 affected

Timeline

2026-07-03: disclosed: Vulnerability reported and published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.