CVE-2026-91104

HP remediated multiple vulnerabilities in HPLIP that could enable remote code execution, privilege escalation, and other attacks.

HP identified and patched multiple vulnerabilities in its HPLIP software that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. DIB organizations must ensure all HP HPLIP components are patched, as these flaws could be exploited to compromise systems and violate CMMC/NIST 800-171 controls. The vendor has already remediated the issues, but unpatched instances remain a risk.

Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP before remediation, exposing systems to remote code execution and privilege escalation.