# OpenPrinting CUPS vulnerabilities Source: https://junglewise.ai/threats/technologies/cups Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/cups.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 16 vulnerabilities in OpenPrinting CUPS: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-61702, was published on 15 October 2026. 2 vulnerabilities in the last four weeks, level on the four before (2). ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 6 - All time: 16 (0 critical, 0 exploited in the wild) ## About OpenPrinting CUPS CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. ## Latest OpenPrinting CUPS vulnerabilities - [CVE-2026-61702: OpenPrinting CUPS path traversal in banner processing](https://junglewise.ai/threats/cve-2026-61702-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.3, published 15 Oct 2026) - [CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in scheduler](https://junglewise.ai/threats/cve-2026-55480-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.7, published 15 Oct 2026) - [CVE-2026-107655: CUPS null pointer dereference in IPP job ticket handling](https://junglewise.ai/threats/cve-2026-107655-a-flaw-was-found-in-cups-when-processing-embedded-job-ticket) (medium, CVSS 4, published 9 Oct 2026) - [CVE-2026-107888: OpenPrinting CUPS NULL pointer dereference in cupsdCheckJobs](https://junglewise.ai/threats/cve-2026-107888-openprinting-cups-before-2-4-20-contains-a-null-pointer) (medium, CVSS 5.1, published 9 Oct 2026) - [CVE-2026-87876: CUPS scheduler case-insensitive username comparison in ACL validation](https://junglewise.ai/threats/cve-2026-87876-cups-scheduler-case-insensitive-username-comparison-in-acl) (low, CVSS 3, published 9 Sep 2026) - [CVE-2026-87875: CUPS cupsUTF32ToUTF8 heap out-of-bounds read in transcode](https://junglewise.ai/threats/cve-2026-87875-cups-cupsutf32toutf8-heap-out-of-bounds-read-in-transcode) (medium, CVSS 4.3, published 9 Sep 2026) - [CVE-2026-41079: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17…](https://junglewise.ai/threats/cve-2026-41079-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4.3, published 24 Apr 2026) - [CVE-2026-39316: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…](https://junglewise.ai/threats/cve-2026-39316-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4, published 7 Apr 2026) - [CVE-2026-39314: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…](https://junglewise.ai/threats/cve-2026-39314-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4, published 7 Apr 2026) - [CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token Disclosure](https://junglewise.ai/threats/cve-2026-34990-openprinting-cups-privilege-escalation-via-local-admin-token) (high, CVSS 7.8, published 3 Apr 2026) - [CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queue](https://junglewise.ai/threats/cve-2026-34980-openprinting-cups-remote-code-execution-in-shared-postscript) (high, CVSS 7.5, published 3 Apr 2026) - [CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS scheduler](https://junglewise.ai/threats/cve-2026-34979-openprinting-cups-heap-buffer-overflow-in-cups-scheduler) (medium, CVSS 5.3, published 3 Apr 2026) - [CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifier](https://junglewise.ai/threats/cve-2026-34978-openprinting-cups-path-traversal-in-rss-notifier) (medium, CVSS 6.5, published 3 Apr 2026) - [CVE-2026-27447: OpenPrinting CUPS authorization bypass in cupsd via case-insensitive comparison](https://junglewise.ai/threats/cve-2026-27447-openprinting-cups-authorization-bypass-in-cupsd-via-case) (medium, CVSS 4.8, published 3 Apr 2026) - [CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-61915-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 6, published 29 Nov 2025) - [CVE-2025-58436: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-58436-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.1, published 29 Nov 2025) ## Most severe OpenPrinting CUPS vulnerabilities - [CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token Disclosure](https://junglewise.ai/threats/cve-2026-34990-openprinting-cups-privilege-escalation-via-local-admin-token) (high, CVSS 7.8, published 3 Apr 2026) - [CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queue](https://junglewise.ai/threats/cve-2026-34980-openprinting-cups-remote-code-execution-in-shared-postscript) (high, CVSS 7.5, published 3 Apr 2026) - [CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifier](https://junglewise.ai/threats/cve-2026-34978-openprinting-cups-path-traversal-in-rss-notifier) (medium, CVSS 6.5, published 3 Apr 2026) - [CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-61915-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 6, published 29 Nov 2025) - [CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in scheduler](https://junglewise.ai/threats/cve-2026-55480-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.7, published 15 Oct 2026) - [CVE-2026-61702: OpenPrinting CUPS path traversal in banner processing](https://junglewise.ai/threats/cve-2026-61702-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.3, published 15 Oct 2026) - [CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS scheduler](https://junglewise.ai/threats/cve-2026-34979-openprinting-cups-heap-buffer-overflow-in-cups-scheduler) (medium, CVSS 5.3, published 3 Apr 2026) - [CVE-2025-58436: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-58436-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.1, published 29 Nov 2025) - [CVE-2026-107888: OpenPrinting CUPS NULL pointer dereference in cupsdCheckJobs](https://junglewise.ai/threats/cve-2026-107888-openprinting-cups-before-2-4-20-contains-a-null-pointer) (medium, CVSS 5.1, published 9 Oct 2026) - [CVE-2026-27447: OpenPrinting CUPS authorization bypass in cupsd via case-insensitive comparison](https://junglewise.ai/threats/cve-2026-27447-openprinting-cups-authorization-bypass-in-cupsd-via-case) (medium, CVSS 4.8, published 3 Apr 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, level on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 2 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other OpenPrinting technologies - [OpenPrinting Cups-Filters](https://junglewise.ai/threats/technologies/cups-filters): 5 vulnerabilities - [OpenPrinting Libcupsfilters](https://junglewise.ai/threats/technologies/libcupsfilters): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "OpenPrinting CUPS vulnerabilities", https://junglewise.ai/threats/technologies/cups, 9 November 2026.