CVE-2026-8632
CVE-2026-8632 · HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.
CVSS 8.5 · High · EPSS 4.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
hp linux imaging and printing software
- Versions
- ≥ 0, < 3.26.4: Affected (custom)
Update to 3.26.4
hplip Debian:12
- Versions
- 3.22.10+dfsg0-2
- Affected ranges
- ECOSYSTEM: < 3.22.10+dfsg0-2+deb12u1
Update to 3.22.10+dfsg0-2+deb12u1
hplip Debian:13
- Versions
- 3.22.10+dfsg0-8.1
- Affected ranges
- ECOSYSTEM: < 3.22.10+dfsg0-8.1+deb13u1
Update to 3.22.10+dfsg0-8.1+deb13u1
hplip Debian:14
- Versions
- 3.22.10+dfsg0-8.1
- Affected ranges
- ECOSYSTEM: < 3.26.4+dfsg0-1
Update to 3.26.4+dfsg0-1
hplip Ubuntu:16.04:LTS
- Versions
- 3.15.7-0ubuntu4
- 3.15.7-0ubuntu5
- 3.15.11-0ubuntu1
- 3.15.11+repack0-1
- 3.15.11+repack0-1ubuntu1
- 3.16.2+repack0-1
- 3.16.2+repack0-1ubuntu1
- 3.16.2+repack0-3
- 3.16.3+repack0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hplip Ubuntu:18.04:LTS
- Versions
- 3.17.7+repack0-3
- 3.17.10+repack0-1
- 3.17.10+repack0-2
- 3.17.10+repack0-3
- 3.17.10+repack0-4
- 3.17.10+repack0-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hplip Ubuntu:20.04:LTS
- Versions
- 3.19.6+dfsg0-1ubuntu1
- 3.19.8+dfsg0-7
- 3.19.11+dfsg0-1
- 3.19.12+dfsg0-1
- 3.19.12+dfsg0-2
- 3.19.12+dfsg0-3
- 3.19.12+dfsg0-3ubuntu1
- 3.19.12+dfsg0-4ubuntu1
- 3.20.3+dfsg0-1
- 3.20.3+dfsg0-2
- 3.20.3+dfsg0-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hplip Ubuntu:22.04:LTS
- Versions
- 3.21.6+dfsg0-0ubuntu1
- 3.21.8+dfsg0-2
- 3.21.12+dfsg0-1
- Affected ranges
- ECOSYSTEM: < 3.21.12+dfsg0-1ubuntu0.1
Update to 3.21.12+dfsg0-1ubuntu0.1
hplip Ubuntu:24.04:LTS
- Versions
- 3.22.10+dfsg0-2ubuntu1
- 3.22.10+dfsg0-2ubuntu2
- 3.23.12+dfsg0-0ubuntu4
- 3.23.12+dfsg0-0ubuntu5
- Affected ranges
- ECOSYSTEM: < 3.23.12+dfsg0-0ubuntu5.1
Update to 3.23.12+dfsg0-0ubuntu5.1
hplip Ubuntu:25.10
- Versions
- 3.24.4+dfsg0-0ubuntu5
- Affected ranges
- ECOSYSTEM: < 3.24.4+dfsg0-0ubuntu5.2
Update to 3.24.4+dfsg0-0ubuntu5.2
hplip Ubuntu:26.04:LTS
- Versions
- 3.24.4+dfsg0-0ubuntu5
- 3.24.4+dfsg0-0ubuntu7
- 3.24.4+dfsg0-0ubuntu8
- Affected ranges
- ECOSYSTEM: < 3.24.4+dfsg0-0ubuntu8.1
Update to 3.24.4+dfsg0-0ubuntu8.1
Original sources
- https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118
- https://access.redhat.com/security/cve/CVE-2026-8632
- https://bugzilla.redhat.com/show_bug.cgi?id=2480297
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8632.json
- https://access.redhat.com/errata/RHSA-2026:48606
- https://access.redhat.com/errata/RHSA-2026:26228
- https://access.redhat.com/errata/RHSA-2026:26335
- https://access.redhat.com/errata/RHSA-2026:48960
- https://access.redhat.com/errata/RHSA-2026:48961
- https://access.redhat.com/errata/RHSA-2026:48959
- https://access.redhat.com/errata/RHSA-2026:48603
- https://access.redhat.com/errata/RHSA-2026:48586
- https://access.redhat.com/errata/RHSA-2026:48171
- https://access.redhat.com/errata/RHSA-2026:26297
- https://nvd.nist.gov/vuln/detail/CVE-2026-8632