CVE-2026-14544
Last modified
CVE-2026-14544 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. EPSS estimates a 0.51% chance of exploitation in the next 30 days.
Description
A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-14544?
How severe is CVE-2026-14544?
How do I fix CVE-2026-14544?
Related CVEs from 2026
- CVE-2026-1452Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2026-1453A missing authentication for critical function vulnerability…9.8
- CVE-2026-14534Trail of Bits fickling versions up to and including 0.1.10 d…8.8
- CVE-2026-14535In Trail of Bits fickling versions up to and including 0.1.1…9.8
- CVE-2026-14536Improper enforcement of a mandatory multi-factor authenticat…8.8
- CVE-2026-1454The Responsive Contact Form Builder & Lead Generation Plugin…7.2
- CVE-2026-1455The Whatsiplus Scheduled Notification for Woocommerce plugin…4.3
- CVE-2026-1456GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
- CVE-2026-1457An authenticated buffer handling flaw in TP-Link VIGI C385 V…8.8
- CVE-2026-14570Crypt::DSA versions before 1.22 for Perl draw the DSA signin…7.5
- CVE-2026-1458GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
- CVE-2026-1459A post-authentication command injection vulnerability in the…7.2
Are you affected by CVE-2026-14544?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
