CVE-2026-91097

HP's HPLIP software contains multiple unpatched vulnerabilities enabling remote code execution and privilege escalation.

HP identified and remediated multiple externally reported vulnerabilities within HPLIP that could enable remote code execution, privilege escalation, and unauthorized file modification. DIB organizations must ensure all HP HPLIP components are patched to prevent attackers from executing arbitrary code or escalating privileges on affected systems. This failure highlights the risk of relying on vendor remediation timelines rather than maintaining strict patch management for all software components.

Shame score — Multiple externally reported vulnerabilities remained unpatched long enough to be actively exploited, enabling remote code execution and privilege escalation.