Detections
Analytics
Alpine: multiple hplip packages, sane-backend-hpaio: security update to 3.26.6-r0
critical Tenable Cloud Security Plugin ID 476221
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings
affect several software components that could potentially enable remote code execution, privilege
escalation, denial of service, information disclosure, or unauthorized file modification under certain
conditions. (CVE-2026-91097, CVE-2026-91098, CVE-2026-91099, CVE-2026-91100, CVE-2026-91106)
Solution
Update the hplip library and its related packages to version 3.26.6-r0 or later.See Also
https://security.alpinelinux.org/vuln/CVE-2026-91097
https://security.alpinelinux.org/vuln/CVE-2026-91098
https://security.alpinelinux.org/vuln/CVE-2026-91099
https://security.alpinelinux.org/vuln/CVE-2026-91100
https://security.alpinelinux.org/vuln/CVE-2026-91101
https://security.alpinelinux.org/vuln/CVE-2026-91102
https://security.alpinelinux.org/vuln/CVE-2026-91103
https://security.alpinelinux.org/vuln/CVE-2026-91104
Plugin Details
Severity: Critical
ID: 476221
Version: Revision 1.1
Type: Local
Published: 10/20/2026
Updated: 10/20/2026
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 58.34
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-91106
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Critical
Base Score: 9.3
Threat Score: 8.1
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 9/16/2026
Reference Information
CVE: CVE-2026-91097, CVE-2026-91098, CVE-2026-91099, CVE-2026-91100, CVE-2026-91101, CVE-2026-91102, CVE-2026-91103, CVE-2026-91104, CVE-2026-91105, CVE-2026-91106