CVE-2026-91105 HP Inc. CVE debrief

Who should care

Defenders responsible for systems using HPLIP should assess exposure and prioritize remediation. This includes IT administrators, security teams, and Linux system administrators who manage HPLIP installations. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Why it matters

CVE-2026-91105 is a high-severity vulnerability in HPLIP that could lead to remote code execution, privilege escalation, or other security impacts. Defenders should prioritize verification, remediation, and monitoring to mitigate potential risks.

• Potential remote code execution requires immediate verification and remediation
• Privilege escalation could lead to unauthorized access and system compromise
• Denial of service could disrupt critical systems and services
• Information disclosure could result in sensitive data exposure

Technical summary

CVE-2026-91105 affects HP's Linux Imaging and Printing (HPLIP) software, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The vulnerability has a CVSS score of 8.6 and is considered high-severity. The CVE record and NVD detail page provide information about the vulnerability, including its CVSS score and vector. A vendor advisory is available from HP, which provides guidance on remediation and mitigation.

Defensive priority

Defenders should prioritize verifying and applying the vendor's remediation for CVE-2026-91105, especially if HPLIP is used in environments where remote code execution or privilege escalation could have significant impacts.

Recommended defensive actions

• Verify HPLIP version and apply vendor remediation if necessary
• Review and update inventory of HPLIP installations
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD detail page provide information about the vulnerability, including its CVSS score and vector. A vendor advisory is available from HP. The vulnerability affects HP's Linux Imaging and Printing (HPLIP) software. The CVE record was published on 2026-09-16T19:18:03.467Z and was last modified on 2026-09-21T17:27:55.557Z. The NVD entry is currently Analyzed. Evidence is limited to public sources and may not reflect the full scope or impact of the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.