Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-34980

32
FAUCET Score

CVE-2026-34980 describes an unauthenticated remote code execution vulnerability in OpenPrinting CUPS versions 2.4.16 and prior, affecting network-exposed cupsd instances with shared target queues. An attacker on the adjacent network can exploit this medium-severity flaw (CVSS 6.1) by sending a crafted Print-Job, which manipulates the 'page-border' value to execute an existing binary as the 'lp' user, leading to high confidentiality impact. Despite the low attack complexity, there is no public exploit code, active exploitation has not been observed, and community discussion is minimal, with no patches publicly available.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.4.16CPE matchmatch criteria
cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

6.1MEDIUM

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
ADJACENT
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
LOW
VS Availability
LOW
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.50%
Probability of exploitation in next 30 days
EPSS Percentile
40.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0050 is in the 48th percentile among its peer group of 239 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

microsoftpatch availablevia msrc
Product: 20737-17084Fixed in: 2.4.17-1
microsoftpatch availablevia msrc
Product: azl3 cups 2.4.16-1 on Azure Linux 3.0Fixed in: 2.4.17-1
ubuntupatch availablevia ubuntu_usn
Product: cups (noble)Fixed in: 2.4.7-1.2ubuntu7.13
ubuntupatch availablevia ubuntu_usn
Product: cups (questing)Fixed in: 2.4.12-0ubuntu3.9
ubuntupatch availablevia ubuntu_usn
Product: cups (xenial)Fixed in: 2.1.3-4ubuntu0.11+esm13
ubuntupatch availablevia ubuntu_usn
Product: cups (resolute)Fixed in: 2.4.16-1ubuntu1.2
ubuntupatch availablevia ubuntu_usn
Product: cups (jammy)Fixed in: 2.4.1op1-1ubuntu4.20
github_advisoryvendor investigatingvia nvd_reference
View patch

Vendor Advisories (3)

ubuntuUSN-8578-1

CUPS control character injection vulnerability

Jul 21, 2026
ubuntuUSN-8405-1

CUPS vulnerabilities

Jun 8, 2026
microsoft2026-Apr/CVE-2026-34980Moderate

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

Apr 2, 2026

References

github.com / OpenPrinting/cups/security/advisories/GHSA-4852-v58g-6cwf
ExploitVendor Advisory