CVE-2026-34978

🗓️ 03 Apr 2026 21:15:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 158 Views🌐 WEB

CUPS RSS notifier path traversal writes outside CacheDir/rss, clobbering job.cache and breaking the scheduler.

Reporter	Title	Published	Views	Family All 90
attackerkb	CVE-2026-34978	3 Apr 202621:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2026-1635)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : cups, --advisory ALAS2-2026-3279 (ALAS-2026-3279)	30 Apr 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : cups (EulerOS-SA-2026-2199)	9 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : cups (EulerOS-SA-2026-2237)	9 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : cups (EulerOS-SA-2026-2282)	10 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : cups (EulerOS-SA-2026-2325)	10 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP15 : cups (EulerOS-SA-2026-2437)	27 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP15 : cups (EulerOS-SA-2026-2478)	27 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : cups (EulerOS-SA-2026-2522)	10 Jul 202600:00	–	nessus

NVD

Vulners

Node

openprinting cupsRange≤2.4.16

[
  {
    "vendor": "OpenPrinting",
    "product": "cups",
    "versions": [
      {
        "version": "<= 2.4.16",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcr

Parameter	Position	Path	Description	CWE
notify-recipient-uri	nested	rss:///../job.cache	Path traversal in RSS notifier via notify-recipient-uri allowing writing to CacheDir/rss (e.g., rss:///../job.cache) and clobbering job.cache	CWE-22

20 Jul 2026 20:10Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.0042

SSVC

CWE-22