# OpenPrinting vulnerabilities Source: https://junglewise.ai/threats/vendors/openprinting Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/openprinting.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 21 vulnerabilities in OpenPrinting: 1 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-123747, was published on 11 November 2026. 2 vulnerabilities in the last four weeks, level on the four before (2). 3 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 3 - Last 90 days: 6 - All time: 21 (0 critical, 0 exploited in the wild) ## About OpenPrinting OpenPrinting is a project of the Linux Foundation that manages the development of printing systems for open source operating systems. ## Latest OpenPrinting vulnerabilities - [CVE-2026-123747: pappl-retrofit directory traversal in PPD file handling](https://junglewise.ai/threats/cve-2026-123747-a-flaw-was-found-in-pappl-retrofit-the-application-fails-to) (high, CVSS 7.3, published 11 Nov 2026) - [CVE-2026-61702: OpenPrinting CUPS path traversal in banner processing](https://junglewise.ai/threats/cve-2026-61702-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.3, published 15 Oct 2026) - [CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in scheduler](https://junglewise.ai/threats/cve-2026-55480-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.7, published 15 Oct 2026) - [CVE-2026-107655: CUPS null pointer dereference in IPP job ticket handling](https://junglewise.ai/threats/cve-2026-107655-a-flaw-was-found-in-cups-when-processing-embedded-job-ticket) (medium, CVSS 4, published 9 Oct 2026) - [CVE-2026-107888: OpenPrinting CUPS NULL pointer dereference in cupsdCheckJobs](https://junglewise.ai/threats/cve-2026-107888-openprinting-cups-before-2-4-20-contains-a-null-pointer) (medium, CVSS 5.1, published 9 Oct 2026) - [CVE-2026-87876: CUPS scheduler case-insensitive username comparison in ACL validation](https://junglewise.ai/threats/cve-2026-87876-cups-scheduler-case-insensitive-username-comparison-in-acl) (low, CVSS 3, published 9 Sep 2026) - [CVE-2026-64611: OpenPrinting libcupsfilters infinite loop in cfIEEE1284NormalizeMakeModel](https://junglewise.ai/threats/cve-2026-64611-openprinting-libcupsfilters-infinite-loop-in) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-64612: OpenPrinting cups-filters denial of service in PNG image reading](https://junglewise.ai/threats/cve-2026-64612-openprinting-cups-filters-denial-of-service-in-png-image-reading) (high, CVSS 7.5, published 20 Jul 2026) - [CVE-2026-41079: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17…](https://junglewise.ai/threats/cve-2026-41079-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4.3, published 24 Apr 2026) - [CVE-2026-39316: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…](https://junglewise.ai/threats/cve-2026-39316-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4, published 7 Apr 2026) - [CVE-2026-39314: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions…](https://junglewise.ai/threats/cve-2026-39314-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 4, published 7 Apr 2026) - [CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token Disclosure](https://junglewise.ai/threats/cve-2026-34990-openprinting-cups-privilege-escalation-via-local-admin-token) (high, CVSS 7.8, published 3 Apr 2026) - [CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queue](https://junglewise.ai/threats/cve-2026-34980-openprinting-cups-remote-code-execution-in-shared-postscript) (high, CVSS 7.5, published 3 Apr 2026) - [CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS scheduler](https://junglewise.ai/threats/cve-2026-34979-openprinting-cups-heap-buffer-overflow-in-cups-scheduler) (medium, CVSS 5.3, published 3 Apr 2026) - [CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifier](https://junglewise.ai/threats/cve-2026-34978-openprinting-cups-path-traversal-in-rss-notifier) (medium, CVSS 6.5, published 3 Apr 2026) - [CVE-2026-27447: OpenPrinting CUPS authorization bypass in cupsd via case-insensitive comparison](https://junglewise.ai/threats/cve-2026-27447-openprinting-cups-authorization-bypass-in-cupsd-via-case) (medium, CVSS 4.8, published 3 Apr 2026) - [CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-61915-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 6, published 29 Nov 2025) - [CVE-2025-58436: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-58436-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.1, published 29 Nov 2025) - [CVE-2025-64524: cups-filters contains backends, filters, and other software required to get the cups printing service working on…](https://junglewise.ai/threats/cve-2025-64524-cups-filters-contains-backends-filters-and-other-software) (low, CVSS 3.3, published 20 Nov 2025) - [CVE-2025-64503: cups-filters contains backends, filters, and other software required to get the cups printing service working on…](https://junglewise.ai/threats/cve-2025-64503-cups-filters-contains-backends-filters-and-other-software) (medium, CVSS 4, published 12 Nov 2025) - [CVE-2025-57812: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the…](https://junglewise.ai/threats/cve-2025-57812-cups-is-a-standards-based-open-source-printing-system-and) (low, CVSS 3.7, published 12 Nov 2025) ## Most severe OpenPrinting vulnerabilities - [CVE-2026-34990: OpenPrinting CUPS Privilege Escalation via Local Admin Token Disclosure](https://junglewise.ai/threats/cve-2026-34990-openprinting-cups-privilege-escalation-via-local-admin-token) (high, CVSS 7.8, published 3 Apr 2026) - [CVE-2026-34980: OpenPrinting CUPS remote code execution in shared PostScript queue](https://junglewise.ai/threats/cve-2026-34980-openprinting-cups-remote-code-execution-in-shared-postscript) (high, CVSS 7.5, published 3 Apr 2026) - [CVE-2026-64611: OpenPrinting libcupsfilters infinite loop in cfIEEE1284NormalizeMakeModel](https://junglewise.ai/threats/cve-2026-64611-openprinting-libcupsfilters-infinite-loop-in) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-64612: OpenPrinting cups-filters denial of service in PNG image reading](https://junglewise.ai/threats/cve-2026-64612-openprinting-cups-filters-denial-of-service-in-png-image-reading) (high, CVSS 7.5, published 20 Jul 2026) - [CVE-2026-123747: pappl-retrofit directory traversal in PPD file handling](https://junglewise.ai/threats/cve-2026-123747-a-flaw-was-found-in-pappl-retrofit-the-application-fails-to) (high, CVSS 7.3, published 11 Nov 2026) - [CVE-2026-34978: OpenPrinting CUPS path traversal in RSS notifier](https://junglewise.ai/threats/cve-2026-34978-openprinting-cups-path-traversal-in-rss-notifier) (medium, CVSS 6.5, published 3 Apr 2026) - [CVE-2025-61915: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version…](https://junglewise.ai/threats/cve-2025-61915-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 6, published 29 Nov 2025) - [CVE-2026-55480: OpenPrinting CUPS symlink-based file truncation in scheduler](https://junglewise.ai/threats/cve-2026-55480-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.7, published 15 Oct 2026) - [CVE-2026-61702: OpenPrinting CUPS path traversal in banner processing](https://junglewise.ai/threats/cve-2026-61702-openprinting-cups-is-an-open-source-printing-system-for-linux-and) (medium, CVSS 5.3, published 15 Oct 2026) - [CVE-2026-34979: OpenPrinting CUPS heap buffer overflow in CUPS scheduler](https://junglewise.ai/threats/cve-2026-34979-openprinting-cups-heap-buffer-overflow-in-cups-scheduler) (medium, CVSS 5.3, published 3 Apr 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, level on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 2 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## OpenPrinting technologies - [OpenPrinting CUPS](https://junglewise.ai/threats/technologies/cups): 16 vulnerabilities - [OpenPrinting Cups-Filters](https://junglewise.ai/threats/technologies/cups-filters): 5 vulnerabilities - [OpenPrinting Libcupsfilters](https://junglewise.ai/threats/technologies/libcupsfilters): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "OpenPrinting vulnerabilities", https://junglewise.ai/threats/vendors/openprinting, 13 November 2026.