CVE-2026-91097

CriticalCVSS 9.8/10Last modified Sep 21, 2026

Description

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2026
Last modified
Sep 21, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-910989.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-910999.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-91104.2Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renCVE-2026-911009.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911019.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911029.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911039.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911049.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911059.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911069.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911079.3openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and caCVE-2026-911084.3The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass
CVE-2026-91097: Critical severity, CVSS 9.8 | Vulnix