A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8483-1 advisory.

    It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this     issue to cause HPLIP to execute arbitrary code. (CVE-2026-8631)

    It was discovered that HPLIP incorrectly handled certain inputs. A local attacker could possibly use this     issue to execute arbitrary code. (CVE-2026-8632)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:26297 advisory.

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)
      * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0586 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-8631:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer     overflow in the hpcups processing path when handling crafted print data.

    CVE-2026-8632:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating     system command injection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0179 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-8631:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer     overflow in the hpcups processing path when handling crafted print data.

    CVE-2026-8632:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating     system command injection.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26297 advisory.

    - OSH fixes after CVE-2026-8631
    - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation       via integer overflow in hpcups

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26335 advisory.

    - OSH fixes after CVE-2026-8631
    - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation       via integer overflow in hpcups

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:26228 advisory.

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-798:01 advisory.

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)
      * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:26297 advisory.

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:26335 advisory.

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:26297 advisory.

    The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides     drivers for Hewlett-Packard printers and multi-function peripherals.

    Security Fix(es):

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:26228 advisory.

    The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides     drivers for Hewlett-Packard printers and multi-function peripherals.

    Security Fix(es):

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:26335 advisory.

    The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides     drivers for Hewlett-Packard printers and multi-function peripherals.

    Security Fix(es):

    * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection     (CVE-2026-8632)

    * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups     (CVE-2026-8631)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2380-1 advisory.

    This update for hplip fixes the following issues

    Update to HPLIP 3.26.4:

    Security issues:

    - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing     and malicious       software installation (bsc#1266031).
    - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the     hpcups       processing path (bsc#1266023).
    - CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command     injection       (bsc#1266024).
    - unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).
    - URI parameter injection via unsanitized USB serial number (bsc#1209401).

    Non security issues:

    - Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
    - hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).

    Changes:

    - Add support for the following new printers:
     * HP LaserJet Pro MFP 3106sdw
     * HP LaserJet Pro MFP 3105sdw
     * HP Envy 6500e series
     * HP Envy 6500 series
     * HP OfficeJet Pro 9730 Series
     * HP OfficeJet Pro 9730e Series
     * HP OfficeJet Pro 9720 Series
     * HP OfficeJet Pro 9720e Series
     * HP OfficeJet Pro 8130e All-in-One series
     * HP OfficeJet Pro 8130 All-in-One series
     * HP OfficeJet 8130e All-in-One series
     * HP OfficeJet 8130 All-in-One series
     * HP OfficeJet Pro 8120e All-in-One series
     * HP OfficeJet Pro 8120 All-in-One series
     * HP OfficeJet 8120e All-in-One series
     * HP OfficeJet 8120 All-in-One series
     * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
     * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
     * HP DeskJet 4300e All-in-One Printer series
     * HP DeskJet Ink Advantage 4300 All-in-One Printer series
     * HP DeskJet 4300 All-in-One Printer series
     * HP DeskJet 2900e All-in-One Printer series
     * HP DeskJet Ink Advantage 2900 All-in-One Printer series
     * HP DeskJet 2900 All-in-One Printer series
     * HP LaserJet Enterprise Flow MFP 8601z
     * HP LaserJet Enterprise 5501
     * HP LaserJet Enterprise MFP 5601dn
     * HP LaserJet Enterprise 6500dn
     * HP LaserJet Enterprise 5501n
     * HP LaserJet Enterprise MFP 5601
     * HP LaserJet Enterprise 6500
     * HP LaserJet Enterprise 5502dn
     * HP LaserJet Enterprise MFP 5602dn
     * HP LaserJet Enterprise 6500n
     * HP LaserJet Enterprise 5502
     * HP LaserJet Enterprise MFP 5602f
     * HP LaserJet Enterprise 6501dn
     * HP LaserJet Enterprise X50452dn
     * HP LaserJet Enterprise Flow MFP 5602zfw
     * HP LaserJet Enterprise 6501
     * HP LaserJet Enterprise X50452
     * HP LaserJet Enterprise MFP 5602
     * HP LaserJet Enterprise X60257dn
     * HP LaserJet Enterprise MFP X53052dn
     * HP LaserJet Enterprise Flow MFP X530
     * HP LaserJet Enterprise X60257
     * HP LaserJet Enterprise MFP X53052
     * HP LaserJet Enterprise X60357dn
     * HP LaserJet Enterprise X60357
     * HP LaserJet Enterprise MFP 6600dn
     * HP LaserJet Enterprise Flow MFP 6600zfw
     * HP LaserJet Enterprise MFP 6600
     * HP LaserJet Enterprise Flow MFP 6600zfsw
     * HP LaserJet Enterprise MFP X62757dn
     * HP LaserJet Enterprise Flow MFP X62757zs
     * HP LaserJet Enterprise MFP X62757
     * DEX D50452dn
     * DEX MFP D53052dn
     * HP LaserJet Pro MFP M126a plus
     * HP LaserJet Pro MFP M126nw plus
     * HP LaserJet Pro MFP M126snw plus
     * HP Envy Photo 7200 series
     * HP Envy Photo 7900 series
     * HP OfficeJet Pro 9110 Series
     * HP OfficeJet 9120 Series
     * HP OfficeJet Pro 9120 Series
     * HP OfficeJet Pro 9130 Series
     * HP LaserJet Enterprise Flow MFP 8601z+
     * HP LaserJet Enterprise MFP 8601dn
     * HP Color LaserJet Enterprise MFP 8801dn
     * HP Color LaserJet Enterprise Flow MFP 8801z
     * HP Color LaserJet Enterprise Flow MFP 8801z+
     * HP LaserJet Enterprise 8501dn
     * HP LaserJet Enterprise 8501x
     * HP LaserJet Enterprise 8501x+
     * DEX MFP D826
     * DEX MFP D82640
     * DEX MFP D82650
     * DEX MFP D82660
     * DEX D50145
     * DEX MFP D42540
     * DEX MFP D52645
     * DEX Color D55745
     * DEX Color MFP D57945
     * DEX Color MFP D677
     * DEX Color MFP D67755
     * DEX Color MFP D67765
     * DEX Color MFP D877
     * DEX Color MFP D87740
     * DEX Color MFP D87750
     * DEX Color MFP D87760
     * DEX Color MFP D87770
     * DEX Color MFP D786
     * DEX Colour MFP D78625
     * DEX Color MFP D78630
     * DEX Color MFP D78635
     * DEX MFP D731
     * DEX MFP D73130
     * DEX MFP D73135
     * DEX MFP D73140

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0404 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-8631:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating     system command injection.

    CVE-2026-8632:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer     overflow in the hpcups processing path when handling crafted print data.

    CVE-2025-43023:
    A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software     documentation. This potential vulnerability is due to the use of a weak code signing key, Digital     Signature Algorithm (DSA).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-28afc9a105 advisory.

    Update to 3.26.4, fixes CVE-2026-8631, CVE-2026-8632


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-df2e96fe77 advisory.

    Update to 3.26.4, fixes CVE-2026-8631, CVE-2026-8632


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This     potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating     system command injection. (CVE-2026-8632)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
325009	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : HPLIP vulnerabilities (USN-8483-1)	Nessus	Ubuntu Local Security Checks	critical
324822	AlmaLinux 9 : hplip (ALSA-2026:26297)	Nessus	Alma Linux Local Security Checks	critical
324641	TencentOS Server 3: hplip (TSSA-2026:0586)	Nessus	Tencent Local Security Checks	critical
324091	Alibaba Cloud Linux 3 : 0179: hplip (ALINUX3-SA-2026:0179)	Nessus	Alibaba Cloud Linux Local Security Checks	critical
322807	Oracle Linux 9 : hplip (ELSA-2026-26297)	Nessus	Oracle Linux Local Security Checks	critical
321975	Oracle Linux 8 : hplip (ELSA-2026-26335)	Nessus	Oracle Linux Local Security Checks	critical
321760	RockyLinux 10 : hplip (RLSA-2026:26228)	Nessus	Rocky Linux Local Security Checks	critical
321700	MiracleLinux 8 : hplip-3.18.4-13.el8_10.ML.1 (AXSA:2026-798:01)	Nessus	Miracle Linux Local Security Checks	critical
321394	RockyLinux 9 : hplip (RLSA-2026:26297)	Nessus	Rocky Linux Local Security Checks	critical
321337	RockyLinux 8 : hplip (RLSA-2026:26335)	Nessus	Rocky Linux Local Security Checks	critical
321265	RHEL 9 : hplip (RHSA-2026:26297)	Nessus	Red Hat Local Security Checks	critical
321248	RHEL 10 : hplip (RHSA-2026:26228)	Nessus	Red Hat Local Security Checks	critical
321233	RHEL 8 : hplip (RHSA-2026:26335)	Nessus	Red Hat Local Security Checks	critical
321055	SUSE SLES15 Security Update : hplip (SUSE-SU-2026:2380-1)	Nessus	SuSE Local Security Checks	critical
319745	TencentOS Server 4: hplip (TSSA-2026:0404)	Nessus	Tencent Local Security Checks	critical
318370	Fedora 43 : hplip (2026-28afc9a105)	Nessus	Fedora Local Security Checks	critical
318283	Fedora 44 : hplip (2026-df2e96fe77)	Nessus	Fedora Local Security Checks	critical
316530	Linux Distros Unpatched Vulnerability : CVE-2026-8632	Nessus	Misc.	high

Detections

Analytics

CVE-2026-8632

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high