EXPOSURES › CVE-2026-91100
CVE-2026-91100
CRITICALHP's HPLIP software contains multiple unpatched vulnerabilities enabling remote code execution and privilege escalation.
HP identified and remediated multiple externally reported vulnerabilities within HPLIP that could enable remote code execution, privilege escalation, and unauthorized file modification. DIB organizations must ensure all HP HPLIP components are patched to prevent attackers from executing arbitrary code or escalating privileges on affected systems. This failure highlights the risk of relying on unpatched software components that are actively exploitable in the wild.
Shame score — HP allowed multiple externally reported vulnerabilities to remain unpatched long enough to be actively exploited, enabling remote code execution and privilege escalation in widely deployed HPLIP software.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.