CVE-2026-27447

CVE-2026-27447 is an authorization bypass vulnerability affecting OpenPrinting CUPS daemon (cupsd) versions 2.4.16 and prior, caused by case-insensitive username comparisons during authorization. This flaw allows an unprivileged user to gain unauthorized access to restricted operations. Rated as MEDIUM severity (CVSS 4.8), exploitation requires network access, high attack complexity, and high privileges, with a high impact on confidentiality. There is currently no evidence of active exploitation, no public exploit code, and minimal community attention, with no patches available at the time of publication.