Critical severity · published Jul 3, 2026
CVE-2026-14544
Hplip: incomplete fix for cve-2026-8631
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
HPLIP · HP
0 · source: vendor
RH
Red Hat Enterprise Linux 10 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14544
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14544
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:39976
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:40831
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:40894
access.redhat.com
https://access.redhat.com/security/cve/CVE-2026-14544
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2496772
More from HPLIP
–
CVE-2009-0122
hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in…