CVE Feed

    Dashboard / CVE / CVE-2026-107655

    CVE-2026-107655

    A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.

    Published:Oct 9, 2026
    Last Modified:Oct 12, 2026
    EPS:Oct 9, 2026
    EPSS Score:0.00128
    CVSS Score:4

    Affected Products

    Vendor
    Cups
    Product
    Cups
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Hummingbird

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-105326 (CVSS 2.5) — An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accept…
    CVE-2026-95511 (CVSS 8.2) — Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGrou…
    CVE-2024-47850 (CVSS 7.5) — CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response…
    CVE-2018-6553 (CVSS 8.8) — The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker co…
    CVE-2015-1159 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine…
    CVE-2015-1158 (CVSS 10) — The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for m…
    CVE-2014-8166 (CVSS 8.8) — The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, wh…
    CVE-2008-1722 (CVSS 4.3) — Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers t…
    CVE-2008-0047 (CVSS 9.3) — Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the ve…
    CVE-2008-0882 (CVSS 10) — Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High