CVE-2025-58436

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15.

• CWE-400

• https://github.com/OpenPrinting/cups/commit/40008d76a001babbb9beb9d9d74b01a86fb6ddb4Patch
• https://github.com/OpenPrinting/cups/releases/tag/v2.4.15Release Notes
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrrExploit, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/11/27/4Mailing List, Third Party Advisory
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrrExploit, Vendor Advisory

Published

Nov 29, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5843The Brandfolder plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-58430listmonk is a standalone, self-hosted, newsletter and mailin…6.1
• CVE-2025-58431ZimaOS is a fork of CasaOS, an operating system for Zima dev…6.2
• CVE-2025-58432ZimaOS is a fork of CasaOS, an operating system for Zima dev…7.8
• CVE-2025-58434Flowise is a drag & drop user interface to build a customize…9.8
• CVE-2025-58435Open OnDemand is an open-source HPC portal. Prior to version…4.1
• CVE-2025-58437Coder allows organizations to provision remote development e…8.1
• CVE-2025-58438internetarchive is a Python and Command-Line Interface to Ar…9.4
• CVE-2025-58439ERP is a free and open source Enterprise Resource Planning t…9.1
• CVE-2025-5844The Radius Blocks plugin for WordPress is vulnerable to Stor…6.4
• CVE-2025-58440Rejected reason: The unisharp/laravel-filemanager is a separ…
• CVE-2025-58441Knowage is an open source analytics and business intelligenc…6.5