VDB
CVE-2026-27447
CVE-2026-27447
PUBLISHED
CVSS 4.8 MEDIUM
Reported by GitHub_M · Published April 3, 2026
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.
EPSS 0.01% · 2.8th percentile
Risk Scores
CVSS v3.1
4.8
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
EPSS Score
0.01%
2.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OpenPrinting | cups | <= 2.4.16 |
| OpenPrinting | cups | * |
Timeline
- Apr 3, 2026 CVE Published
- Apr 6, 2026 Security Advisory
- Apr 6, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score