CVE-2026-95511

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-95511
Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

22 Sep 2026, 15:17

Type Values Removed Values Added
CWE CWE-269
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2026-95511', 'source': 'secalert@redhat.com'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2537749', 'source': 'secalert@redhat.com'}
  • {'url': 'https://github.com/v12-security/pocs/tree/main/cups/cups2root', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}
Summary (en) A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, so the root-privileged backend can write attacker-controlled print data to an arbitrary file. This can be used to change security-sensitive CUPS configuration and ultimately achieve root code execution. Exploitation requires local lpadmin group membership and a serial backend binary installed with root-only permissions. (en) Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed.
CVSS v2 : unknown
v3 : 8.2 		v2 : unknown
v3 : unknown

22 Sep 2026, 14:17

Type Values Removed Values Added
References () https://github.com/v12-security/pocs/tree/main/cups/cups2root - () https://github.com/v12-security/pocs/tree/main/cups/cups2root -

22 Sep 2026, 09:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-09-22 09:17

Updated : 2026-09-22 15:17

NVD link : CVE-2026-95511

Mitre link : CVE-2026-95511

CVE.ORG link : CVE-2026-95511

JSON object : View

Products Affected

No product.

CWE

No CWE.