EXPOSURES › CVE-2026-91106
CVE-2026-91106
CRITICALHP remediated multiple vulnerabilities in HPLIP that could enable remote code execution, privilege escalation, and other attacks.
HP identified and patched multiple vulnerabilities in its HPLIP software that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. DIB organizations must ensure all HP HPLIP components are patched, as unpatched instances could be exploited to compromise systems. This highlights the risk of relying on vendor remediation timelines for critical infrastructure software.
Shame score — HP allowed multiple externally reported vulnerabilities to persist in HPLIP before remediation, enabling potential remote code execution and privilege escalation.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.