← Back

CVE-2026-27447

nvd nist
Published: Apr 3, 2026Modified: Jul 24, 2026

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
Exploitability: 2.1 / Impact: 4.2
Source: NVD

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.

Affected (1)

Products: Openprinting: Cups
1 product
Cups
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 2.4.16

References (2)

Timeline

No history available yet.