CUPS Vulnerability: Remote Code Execution Risk in AlmaLinux 9 Packages
Summary
ALSA-2026:39316: Moderate: cups security update. Affects cups versions < 1:2.3.3op2-39.el9_8. Fixed in 1:2.3.3op2-39.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Common UNIX Printing System (CUPS) is a widely used printing system for UNIX-like operating systems, including Linux. It provides a portable printing layer that allows users to manage print jobs and queues effectively. CUPS supports various printing protocols and is essential for both local and network printing. However, a recent vulnerability has been identified that could allow unauthorized users to execute code remotely through shared PostScript queues.
Vulnerability Detail
The vulnerability arises from the way CUPS handles anonymous Print-Job requests. Specifically, the issue allows these requests to reach the 'lp' command, which can lead to remote code execution. This vulnerability, identified as CVE-2026-34980, poses a moderate risk as it could allow an attacker to execute arbitrary code on the server, potentially compromising sensitive data and system integrity.
How To Fix
Minimum fixed version
1:2.3.3op2-39.el9_8
This is the first release that contains the fix.
sudo dnf update cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the CUPS service by configuring the firewall to block unauthorized network access. This can be done using the following command:
sudo firewall-cmd --add-service=cups --permanent; sudo firewall-cmd --reload
However, this is not a permanent solution and updating the packages is strongly recommended.
Conclusion
The CUPS vulnerability identified as CVE-2026-34980 poses a moderate risk of remote code execution through unauthorized Print-Job requests. It is crucial to update the affected packages to the patched version to safeguard your system. Implementing firewall rules can provide temporary protection, but a full update is necessary for complete security.
See every vulnerability recorded for cups →
FAQ
CVE-2026-34980 is a vulnerability in the CUPS printing system that allows remote code execution through anonymous Print-Job requests.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Not fixing this vulnerability could allow attackers to execute arbitrary code on your server, leading to potential data breaches and system compromises.
Yes, you can restrict access to the CUPS service using firewall rules as a temporary workaround until the patch is applied.
The affected packages include cups, cups-client, cups-devel, cups-filesystem, cups-ipptool, cups-libs, cups-lpd, and cups-printerapp.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
