{
  "cveId": "CVE-2026-91099",
  "url": "https://patchblox.com/security/cve/CVE-2026-91099",
  "summary": "CVE-2026-91099 is fixed in 5 products on 1 platform, first by SUSE-SU-2026:4362-1, released September 28, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "hplip: The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for...",
  "description": "The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023)\n  * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098)\n  * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097)\n  * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106)\n  * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100)\n  * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101)\n  * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104)\n  * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105)\n  * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2026-09-16T18:45:51Z",
  "severity": "important",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00981,
  "epssPercentile": 0.62481,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "hplip",
      "release": "RHEL 10",
      "fixedVersion": "3.26.6-1.el10_2.3",
      "fix": "RHSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82883",
      "released": "2026-10-16T15:54:38Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "RHEL 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "RHSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82295",
      "released": "2026-10-25T13:38:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "RHEL 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "RHSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82882",
      "released": "2026-10-16T15:54:38Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "almalinux 10",
      "fixedVersion": "3.26.6-1.el10_2.3",
      "fix": "ALSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82883",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "almalinux 8",
      "fixedVersion": "3.26.6-3.el8_10",
      "fix": "ALSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82295",
      "released": "2026-11-07T00:40:04Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "almalinux 9",
      "fixedVersion": "3.26.6-1.el9_8.3",
      "fix": "ALSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82882",
      "released": "2026-11-07T00:40:32Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "ol 10",
      "fixedVersion": "0:3.26.6-1.el10_2.3",
      "fix": "ELSA-2026-82883",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82883",
      "released": "2026-11-07T00:59:15Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "ol 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "ELSA-2026-82295",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82295",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "ol 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "ELSA-2026-82882",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82882",
      "released": "2026-11-07T00:52:27Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "rocky 10",
      "fixedVersion": "0:3.26.6-1.el10_2.3",
      "fix": "RLSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-82883",
      "released": "2026-11-07T00:39:51Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "rocky 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "RLSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-82295",
      "released": "2026-11-07T00:39:51Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "rocky 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "RLSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-82882",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "sles 15.6",
      "fixedVersion": "3.26.6-150600.4.15.1",
      "fix": "SUSE-SU-2026:4364-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4364-1",
      "released": "2026-09-28T15:01:14Z"
    },
    {
      "platform": "linux",
      "product": "hplip",
      "release": "sles 15.7",
      "fixedVersion": "3.26.6-150700.4.11.1",
      "fix": "SUSE-SU-2026:4362-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4362-1",
      "released": "2026-09-28T15:00:40Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "almalinux 10",
      "fixedVersion": "3.26.6-1.el10_2.3",
      "fix": "ALSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82883",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "almalinux 8",
      "fixedVersion": "3.26.6-3.el8_10",
      "fix": "ALSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82295",
      "released": "2026-11-07T00:40:04Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "almalinux 9",
      "fixedVersion": "3.26.6-1.el9_8.3",
      "fix": "ALSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82882",
      "released": "2026-11-07T00:40:32Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "ol 10",
      "fixedVersion": "0:3.26.6-1.el10_2.3",
      "fix": "ELSA-2026-82883",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82883",
      "released": "2026-11-07T00:59:15Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "ol 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "ELSA-2026-82295",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82295",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip-common",
      "release": "ol 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "ELSA-2026-82882",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82882",
      "released": "2026-11-07T00:52:27Z"
    },
    {
      "platform": "linux",
      "product": "hplip-gui",
      "release": "RHEL 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "RHSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82295",
      "released": "2026-10-25T13:38:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip-gui",
      "release": "almalinux 8",
      "fixedVersion": "3.26.6-3.el8_10",
      "fix": "ALSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82295",
      "released": "2026-11-07T00:40:04Z"
    },
    {
      "platform": "linux",
      "product": "hplip-gui",
      "release": "ol 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "ELSA-2026-82295",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82295",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "RHSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82295",
      "released": "2026-10-25T13:38:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "RHSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82882",
      "released": "2026-10-16T15:54:38Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "almalinux 10",
      "fixedVersion": "3.26.6-1.el10_2.3",
      "fix": "ALSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82883",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "almalinux 8",
      "fixedVersion": "3.26.6-3.el8_10",
      "fix": "ALSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82295",
      "released": "2026-11-07T00:40:04Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "almalinux 9",
      "fixedVersion": "3.26.6-1.el9_8.3",
      "fix": "ALSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82882",
      "released": "2026-11-07T00:40:32Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "ol 10",
      "fixedVersion": "0:3.26.6-1.el10_2.3",
      "fix": "ELSA-2026-82883",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82883",
      "released": "2026-11-07T00:59:15Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "ol 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "ELSA-2026-82295",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82295",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "hplip-libs",
      "release": "ol 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "ELSA-2026-82882",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82882",
      "released": "2026-11-07T00:52:27Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "RHEL 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "RHSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82295",
      "released": "2026-10-25T13:38:28Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "RHEL 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "RHSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-82882",
      "released": "2026-10-16T15:54:38Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "almalinux 10",
      "fixedVersion": "3.26.6-1.el10_2.3",
      "fix": "ALSA-2026:82883",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82883",
      "released": "2026-11-07T00:39:57Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "almalinux 8",
      "fixedVersion": "3.26.6-3.el8_10",
      "fix": "ALSA-2026:82295",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82295",
      "released": "2026-11-07T00:40:04Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "almalinux 9",
      "fixedVersion": "3.26.6-1.el9_8.3",
      "fix": "ALSA-2026:82882",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-82882",
      "released": "2026-11-07T00:40:32Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "ol 10",
      "fixedVersion": "0:3.26.6-1.el10_2.3",
      "fix": "ELSA-2026-82883",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82883",
      "released": "2026-11-07T00:59:15Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "ol 8",
      "fixedVersion": "0:3.26.6-3.el8_10",
      "fix": "ELSA-2026-82295",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82295",
      "released": "2026-11-07T00:48:28Z"
    },
    {
      "platform": "linux",
      "product": "libsane-hpaio",
      "release": "ol 9",
      "fixedVersion": "0:3.26.6-1.el9_8.3",
      "fix": "ELSA-2026-82882",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-82882",
      "released": "2026-11-07T00:52:27Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}