[NEU] [UNGEPATCHT] [niedrig] CUPS: Schwachstelle ermöglicht Codeausführung

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

low

Published

2026-09-14

Exploitation

Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3325

Recent advisories for CUPS

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• medium[UPDATE] [mittel] CUPS (libcupsfilters, cups-filters): Schwachstelle ermöglicht Denial of Servicecert-bund · 2026-09-15
• low[UPDATE] [niedrig] CUPS: Mehrere Schwachstellen ermöglichen Offenlegung von Informationencert-bund · 2026-09-14
• lowCVE-2026-87876: Two case-insensitive comparisons on request-derived usernames outside the main authorization p…nvd · 2026-09-09
• mediumCVE-2026-87875: The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can …nvd · 2026-09-09
• mediumCVE-2026-87875: Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-lengt…msrc · 2026-09-08
• lowCVE-2026-87876: Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths …msrc · 2026-09-08

More from CERT-Bund (BSI) Security Advisories

• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service2026-09-15
• high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen2026-09-15
• high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff2026-09-15
• high[NEU] [hoch] MISP: Mehrere Schwachstellen2026-09-15
• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service oder unspezifischer Angri…2026-09-15