VDB
ALPINE-CVE-2026-27447
ALPINE-CVE-2026-27447
PUBLISHED
CVSS 6.300000190734863 MEDIUM
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.21 | cups | 2.4.9-r0, 2.4.8-r0, 2.4.7-r4 |
| Alpine:v3.22 | cups | 2.4.9-r0, 1.4.3-r3, 1.4.4-r0 |
| Alpine:v3.20 | cups | 1.6.2-r1, 1.6.3-r0, 2.0.0-r0 |
| Alpine:v3.23 | cups | 2.2.5-r0, 2.2.3-r1, 2.2.3-r0 |
Timeline
- Apr 3, 2026 CVE Published
- Apr 29, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch