CVE-2026-41079: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17…
CVE-2026-41079 · Severity: medium · CVSS 4.3 · Published 2026-04-24
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.
No. Junglewise Threat Intelligence has no report of CVE-2026-41079 being exploited in the wild.
How severe is CVE-2026-41079?
Medium severity, with a CVSS score of 4.3, published 24 April 2026.
Which products and versions are affected?
OpenPrinting Cups. The advisory does not name versions.
Is there a fix for CVE-2026-41079?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2026-41079?
Check whether you run OpenPrinting Cups. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.