CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

fuzzowski

Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during the whole proces...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A fully functional proof-of-concept exploit targeting the CUPS Common Unix Printing System remote code execution vulnerability chain discovered in September 2024. This chain consists of four CVEs — CVE-2024-47176, CVE-2024-47076, CVE-2024-47175,...

CVE-2026-34990

CVE-2026-34990 — CUPS local privilege escalation cups2root, de-harnessed CVSS 3.x : 8.4 HIGH approx — verify CWE : CWE-287 Improper Authentication + CWE-269 Improper Privilege Mgmt Fix : CUPS 2.4.17+ Affects : CUPS ≤ 2.4.16 with cupsd running as root and 631 reachable locally Local privilege...

RLSA-2026:88280 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial o...

golang-github-openprinting-ipp-usb security update

An update is available for golang-github-openprinting-ipp-usb. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HTTP reverse proxy, backed by IPP-over-USB...

golang-github-openprinting-ipp-usb security update

0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102...

RockyLinux 10 : golang-github-openprinting-ipp-usb (RLSA-2026:88280)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88280 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-88280)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88280 advisory. 0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

ALSA-2026:88280 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial o...

RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:88280)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88280 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-U...

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php Multiple Vulnerabilities (CENTOS6:CLSA-2026:1791920953)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1791920953 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs. Th...

CentOS Linux 8 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS-STREAM8:CLSA-2026:1791832189)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1791832189 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs. The...

cups: cups: Arbitrary code execution via newline injection in printer status messages

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...

CVE-2026-55453

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...

CVE-2026-61702 OpenPrinting CUPS: root-side banner file disclosure

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copybanner in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets...

CVE-2026-61702

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copybanner in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets...

CVE-2026-55453 CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quotestring function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before reportattr writes the value to the...