CVE-2026-27447
Medium · 4.8CVSS
4.8
EPSS
0.3%
Published
Apr 3, 2026
CISA due date
—
The record
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | cups | 0 | 2.4.17-1.1 |
Related vulnerabilities
- CVE-2026-41079 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-39316 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-39314 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-34990 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-34980 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-34979 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2026-34978 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… Also affects cups
- CVE-2025-58436 OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack Also affects cups