VDB
DEBIAN-CVE-2026-27447
DEBIAN-CVE-2026-27447
PUBLISHED
CVSS 6.300000190734863 MEDIUM
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | cups | 0, 2.4.10-3, 2.4.10-3+deb13u1 |
| Debian:12 | cups | *, 2.4.7-1.1, * |
| Debian:14 | cups | 2.4.14-1, 2.4.15-1, 2.4.16-1 |
| Debian:11 | cups | 2.4.2-6, 0, 2.3.3op2-3+deb11u1 |
Timeline
- Apr 3, 2026 CVE Published
- May 15, 2026 CVE Updated