Linux Distros Unpatched Vulnerability : CVE-2026-34978

medium Nessus Plugin ID 304956

Language:

Synopsis

The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be patched.

Description

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

- OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri (e.g., rss:///../job.cache), letting a remote IPP client write RSS XML bytes outside CacheDir/rss (anywhere that is lp-writable). In particular, because CacheDir is group-writable by default (typically root:lp and mode 0770), the notifier (running as lp) can replace root-managed state files via temp-file + rename(). This PoC clobbers CacheDir/job.cache with RSS XML, and after restarting cupsd the scheduler fails to parse the job cache and previously queued jobs disappear. At time of publication, there are no publicly available patches. (CVE-2026-34978)

Note that Nessus relies on the presence of the package as reported by the vendor.

Solution

There is no known solution at this time.

Plugin Details

Severity: Medium

ID: 304956

File Name: unpatched_CVE_2026_34978.nasl

Version: 1.4

Type: Local

Agent: unix

Family: Misc.

Published: 4/5/2026

Updated: 4/17/2026

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.3

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 9

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-34978

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 6.2

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Temporal Vector: CVSS:3.0/E:P/RL:U/RC:C

Vulnerability Information

CPE: p-cpe:/a:centos:centos:cups-ipptool, p-cpe:/a:redhat:enterprise_linux:cups, cpe:/o:debian:debian_linux:11.0, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, p-cpe:/a:redhat:enterprise_linux:cups-filesystem, p-cpe:/a:redhat:enterprise_linux:cups-printerapp, cpe:/o:debian:debian_linux:12.0, cpe:/o:canonical:ubuntu_linux:25.10, cpe:/o:redhat:enterprise_linux:9, p-cpe:/a:redhat:enterprise_linux:cups-ipptool, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, p-cpe:/a:centos:centos:cups-printerapp, p-cpe:/a:redhat:enterprise_linux:cups-lpd, cpe:/o:centos:centos:8, p-cpe:/a:centos:centos:cups-lpd, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:10, cpe:/o:debian:debian_linux:13.0, p-cpe:/a:centos:centos:cups, p-cpe:/a:centos:centos:cups-filesystem, p-cpe:/a:debian:debian_linux:cups, p-cpe:/a:centos:centos:cups-client, p-cpe:/a:redhat:enterprise_linux:cups-client, p-cpe:/a:centos:centos:cups-devel, p-cpe:/a:redhat:enterprise_linux:cups-libs, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, p-cpe:/a:redhat:enterprise_linux:cups-devel, p-cpe:/a:canonical:ubuntu_linux:cups, p-cpe:/a:centos:centos:cups-libs, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:debian:debian_linux:14.0

Required KB Items: Host/cpu, Host/local_checks_enabled, global_settings/vendor_unpatched, Host/OS/identifier

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 4/3/2026

Reference Information

CVE: CVE-2026-34978

Detections

Analytics