Technology · OpenPrinting
OpenPrinting CUPS vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 16 vulnerabilities in OpenPrinting CUPS: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-61702, was published on 15 October 2026. 2 vulnerabilities in the last four weeks, level on the four before (2).
- Last 7 days
- 0
- Last 90 days
- 6
- Critical, all time
- 0
- Exploited in the wild
- 0
About OpenPrinting CUPS
CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems.
Latest OpenPrinting CUPS vulnerabilities
- CVE-2026-61702: OpenPrinting CUPS path traversal in banner processingmediumCVSS 5.3EPSS 0.4%
- CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in schedulermediumCVSS 5.7EPSS 0.2%
- CVE-2026-107655: CUPS null pointer dereference in IPP job ticket handlingmediumCVSS 4EPSS 0.1%
- CVE-2026-107888: OpenPrinting CUPS NULL pointer dereference in cupsdCheckJobsmediumCVSS 5.1EPSS 0.1%
- CVE-2026-87876: CUPS scheduler case-insensitive username comparison in ACL validationlowCVSS 3EPSS 0.3%
- CVE-2026-87875: CUPS cupsUTF32ToUTF8 heap out-of-bounds read in transcodemediumCVSS 4.3EPSS 0.3%
- CVE-2026-41079: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17…mediumCVSS 4.3EPSS 0.4%
- CVE-2026-39316: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…mediumCVSS 4EPSS 0.2%
- CVE-2026-39314: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…mediumCVSS 4EPSS 0.1%
- CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token DisclosurehighCVSS 7.8EPSS 0.3%
- CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queuehighCVSS 7.5EPSS 0.5%
- CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS schedulermediumCVSS 5.3EPSS 0.4%
- CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifiermediumCVSS 6.5EPSS 0.4%
- CVE-2026-27447: OpenPrinting CUPS authorization bypass in cupsd via case-insensitive comparisonmediumCVSS 4.8EPSS 0.3%
- CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…mediumCVSS 6EPSS 0.5%
- CVE-2025-58436: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…mediumCVSS 5.1EPSS 0.2%
Most severe OpenPrinting CUPS vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token DisclosurehighCVSS 7.8EPSS 0.3%
- CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queuehighCVSS 7.5EPSS 0.5%
- CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifiermediumCVSS 6.5EPSS 0.4%
- CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…mediumCVSS 6EPSS 0.5%
- CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in schedulermediumCVSS 5.7EPSS 0.2%
- CVE-2026-61702: OpenPrinting CUPS path traversal in banner processingmediumCVSS 5.3EPSS 0.4%
- CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS schedulermediumCVSS 5.3EPSS 0.4%
- CVE-2025-58436: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…mediumCVSS 5.1EPSS 0.2%
- CVE-2026-107888: OpenPrinting CUPS NULL pointer dereference in cupsdCheckJobsmediumCVSS 5.1EPSS 0.1%
- CVE-2026-27447: OpenPrinting CUPS authorization bypass in cupsd via case-insensitive comparisonmediumCVSS 4.8EPSS 0.3%
Vulnerabilities per week
2 vulnerabilities in the last four weeks, level on the four before (2). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 2 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 2 | 0 | |
| 12 Oct 2026 | 2 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many OpenPrinting CUPS vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/cups)<a href="https://junglewise.ai/threats/technologies/cups"><img src="https://junglewise.ai/threats/technologies/cups/badge.svg" alt="OpenPrinting CUPS vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/cups.json, and this page as text at https://junglewise.ai/threats/technologies/cups.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "OpenPrinting CUPS vulnerabilities", https://junglewise.ai/threats/technologies/cups, 9 November 2026.