EXPOSURES › CVE-2026-91099
CVE-2026-91099
CRITICALHP's HPLIP software contains multiple unpatched vulnerabilities enabling remote code execution and privilege escalation.
HP identified and remediated multiple externally reported vulnerabilities within HPLIP that could enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. DIB organizations must ensure HPLIP and similar printer drivers are patched, as unpatched RCE flaws are high-risk entry points for attackers. This failure highlights the need for rigorous supply-chain and software-bill-of-materials (SBOM) validation.
Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP, enabling remote code execution and privilege escalation before remediation.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.