Is CVE-2026-61702 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-61702 being exploited in the wild.

How severe is CVE-2026-61702?

Medium severity, with a CVSS score of 5.3, published 15 October 2026.

Which products and versions are affected?

OpenPrinting Cups before 2.4.20.

Is there a fix for CVE-2026-61702?

Yes: fixed in 2.4.20. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-61702 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-61702?

Check whether you run OpenPrinting Cups at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-61702: OpenPrinting CUPS path traversal in banner processing

CVE-2026-61702 · Severity: medium · CVSS 5.3 · Published 2026-10-15

CUPS is a printing system that manages print jobs and manages access to printers on Unix-like systems. A flaw in banner processing allows an attacker to read arbitrary files from the system by crafting malicious print job attributes, potentially exposing sensitive data. The vulnerability requires the attacker to submit a specially crafted print job and relies on existing file state such as symlinks, limiting but not eliminating real-world impact.

Technologies: OpenPrinting Cups. Vendors: OpenPrinting.

Quick answers

Is CVE-2026-61702 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-61702 being exploited in the wild.
How severe is CVE-2026-61702?: Medium severity, with a CVSS score of 5.3, published 15 October 2026.
Which products and versions are affected?: OpenPrinting Cups before 2.4.20.
Is there a fix for CVE-2026-61702?: Yes: fixed in 2.4.20. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-61702 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-61702?: Check whether you run OpenPrinting Cups at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2.4.20

Technical details

A path traversal vulnerability exists in the copy_banner() function in scheduler/ipp.c prior to version 2.4.20, where the attacker-controlled IPP attributes-natural-language value is unsanitized and used as a directory component beneath DataDir/banners. By injecting path separators, an attacker can traverse to arbitrary files on the system that the CUPS scheduler can access. Successful exploitation requires the job-sheets value to match a registered banner basename and pre-positioned path state such as symlinks, but allows file contents to be copied into a spool object and delivered to an attacker-observable endpoint.

Affected products

OpenPrinting CUPS before 2.4.20

Timeline

2026-10-15: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.