PT-2026-35029 · Openprinting+3 · Cups+3

Tomer-Pl · CVE-2026-41079 · Published 2026-04-24 · Updated 2026-07-10

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.17

Description A network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend, leading to an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings. These strings are then visible to authenticated users through the CUPS web interface and IPP Get-Printer-Attributes responses.

Recommendations Update to version 2.4.17.

Exploit

Fix

DoS

Out of bounds Read

Information Disclosure

Weakness Enumeration

CWE-125

CWE-200

Related Identifiers

BDU:2026-10013

CVE-2026-41079

ECHO-8222-9154-2D64

GHSA-6WPW-G8G6-WVRV

OESA-2026-2197

OPENSUSE-SU-2026:10820-1

OPENSUSE-SU-2026:20812-1

SUSE-SU-2026:21787-1

SUSE-SU-2026:21836-1

SUSE-SU-2026:21850-1

SUSE-SU-2026:21871-1

USN-8405-1

Affected Products

Cups

Linuxmint

Red Os

Ubuntu

References · 30

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41079.json · Exploit
• 🔥 https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv · Exploit
• https://github.com/OpenPrinting/cups/commit/b7c2525a885f528d243c3a92197ca99609b3f080 · Patch
• https://github.com/OpenPrinting/cups/commit/d7fe0f521ff3b24676511e747b058362b9a20737 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10820-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8405-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34978 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-27447 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41079 · Security Note
• https://osv.dev/vulnerability/CVE-2026-41079 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-41079 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2197 · Vendor Advisory