CVE-2026-107655

Publié : 9 octobre 2026

Modifié : 9 octobre 2026

Score CVSS

MEDIUM

Description détaillée

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Références et Patchs

https://access.redhat.com/security/cve/CVE-2026-107655 https://bugzilla.redhat.com/show_bug.cgi?id=2548399 https://github.com/OpenPrinting/cups/commit/12237ad https://github.com/OpenPrinting/cups/commit/25d6830 https://github.com/OpenPrinting/cups/security/advisories/GHSA-58wv-9ffm-5w78

Dernières Vulnérabilités

CVE-2026-96809

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Injection.This issue affects EduAdmin Booking: from n/a before 6.0.0.

VOIR DÉTAILS

CVE-2026-96761

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3.

VOIR DÉTAILS

CVE-2026-96671

Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.

VOIR DÉTAILS