EXPOSURES › CVE-2026-91103
CVE-2026-91103
CRITICALHP's HPLIP software contains multiple unpatched vulnerabilities enabling remote code execution and privilege escalation.
HP identified and remediated multiple externally reported vulnerabilities within HPLIP that could enable remote code execution, privilege escalation, and unauthorized file modification. DIB organizations must ensure HPLIP and similar printer drivers are patched, as unpatched RCE flaws are high-risk entry points for attackers. This failure highlights the need for rigorous supply-chain and software-bill-of-materials (SBOM) validation for all hardware and firmware.
Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP, enabling remote code execution and privilege escalation before remediation.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.