CUPS Vulnerability: Remote Code Execution Risk in Anonymous Print-Job Requests
Summary
ALSA-2026:39302: Moderate: cups security update. Affects cups versions < 1:2.4.10-18.el10_2. Fixed in 1:2.4.10-18.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Common UNIX Printing System (CUPS) is a widely used printing system for UNIX-like operating systems, including Linux. It provides a portable printing layer that allows users to manage print jobs and queues. CUPS supports various printing protocols and offers features such as print job scheduling, printer discovery, and driver management. However, a recent vulnerability has been identified that allows unauthorized users to send print jobs, potentially leading to remote code execution.
Vulnerability Detail
The vulnerability, identified as CVE-2026-34980, arises from the OpenPrinting CUPS implementation, which permits anonymous Print-Job requests to reach the 'lp' command. This flaw can be exploited by attackers over the network, allowing them to execute arbitrary code on the server. The implications of this vulnerability are significant, as it could lead to unauthorized access, data breaches, or further exploitation of the affected system.
How To Fix
Minimum fixed version
1:2.4.10-18.el10_2
This is the first release that contains the fix.
sudo dnf update cupsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the CUPS service by configuring firewall rules to limit network access or by disabling anonymous printing until the update is applied. This can be done by editing the CUPS configuration file located at '/etc/cups/cupsd.conf' and setting 'Allow @LOCAL' for specific IP ranges.
Conclusion
The CUPS vulnerability identified as CVE-2026-34980 poses a significant risk due to its potential for remote code execution through unauthorized print job requests. Users are strongly advised to update their CUPS packages to the latest patched version to mitigate this risk. Implementing temporary workarounds can provide additional protection until the update is applied.
See every vulnerability recorded for cups →
FAQ
CUPS stands for Common UNIX Printing System, which is a printing system for UNIX-like operating systems that allows users to manage print jobs and queues.
CVE-2026-34980 refers to a specific vulnerability in CUPS that allows unauthorized users to send print jobs, potentially leading to remote code execution.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check your application for this vulnerability using the Vulert playground at Vulert Scanner without needing to sign up.
If immediate updates are not possible, consider implementing firewall rules to restrict access to the CUPS service or disabling anonymous printing as a temporary measure.
For more details, refer to the CVE page associated with CVE-2026-34980, which provides insights into the impact, CVSS score, and acknowledgments.
Related vulnerabilities
Recent vulnerabilities recorded for cups.
