PatchTheCVEcups vulnerabilities and fixes
Recent CVEs affecting cups, with upgrade or downgrade steps. 8 tracked.
cups has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-10-15. Highest priority: CVE-2026-61702 (score 43/100).
- CVE-2026-107885 LOW 3.3 UPGRADE OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handli
- CVE-2026-107886 LOW 2.3 UPGRADE OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management
- CVE-2026-107888 MEDIUM 5.1 UPGRADE OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-
- CVE-2026-107890 LOW 3.3 UPGRADE OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-c
- CVE-2026-55453 LOW 3.3 UPGRADE OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
- CVE-2026-55467 LOW 2.5 UPGRADE OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
- CVE-2026-55480 MEDIUM 5.7 UPGRADE OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
- CVE-2026-61702 MEDIUM 5.3 UPGRADE OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
FAQ
How do I fix cups vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cups being exploited right now?
None of the tracked cups CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cups CVE should I patch first?
CVE-2026-61702 currently ranks highest (43/100): OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.