EXPOSURES › CVE-2026-91102
CVE-2026-91102
CRITICALHP's HPLIP software contains multiple unpatched vulnerabilities enabling remote code execution and privilege escalation.
HP identified and remediated multiple externally reported vulnerabilities within HPLIP that could enable remote code execution, privilege escalation, and unauthorized file modification. DIB organizations must ensure HPLIP and similar printer drivers are patched, as unpatched RCE flaws are high-risk attack vectors for supply-chain and endpoint compromise.
Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP, enabling remote code execution and privilege escalation before remediation.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.