CVE-2026-91105

HP remediated multiple vulnerabilities in HPLIP that could enable remote code execution, privilege escalation, and other attacks.

HP identified and patched multiple vulnerabilities in its HPLIP software that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. DIB organizations must ensure all HP HPLIP components are patched, as unpatched instances could be exploited to compromise systems, violate CMMC/NIST 800-171 controls, and lead to data breaches. The vendor has remediated the issues, but the exposure highlights the risk of relying on unpatched third-party software.

Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP, enabling remote code execution and other severe attacks, which reflects avoidable negligence despite eventual remediation.