CVE-2026-8631

CVE Enrichment

CVSS: 9.3 CRITICAL
EPSS: 1.81%
EPSS Percentile: 78.67%
CISA KEV: Not listed

Description

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 21-May-2026 04:16
Last Modified: 04-Aug-2026 20:18
EPSS Date: 2026-11-02
CWE: CWE-122, CWE-190

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:N /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

Affected Products / Versions

hp / linux_imaging_and_printing Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 3.26.4
cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:*

References

Last enrichment sync: 03-Nov-2026 04:22
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

HP has released fixes for CVE-2026-8631 (CVSS score: 9.3), a critical heap-based buffer overflow vulnerability in HPLIP that could allow escalation of privileges and/or arbitrary code execution. Cybersecurity Roundup: 47 Zero-Days, Cloud Intrusions and AI-Driven Attacks

CVE (1)

Malware (10)

People (5)

Threat Actors (8)

MITRE ATT&CK (13)

Vendors (10)

Products (22)

Tools (1)

Industries (2)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.