CVE-2026-34978
Path traversal in Openprinting Cups
CVSS score
6.5
EPSS probability
%0.4
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/OpenPrinting/cups/security/advisories/GHSA-f53q-7mxp-9gcr
Makefile Go / Python
Similar Vulnerabilities
5.7
CVE-2026-55480
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
O
Patch status unknown
5.3
CVE-2026-61702
OpenPrinting CUPS: root-side banner file disclosure
O
Patch status unknown
3.3
CVE-2026-55453
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip
O
Patch status unknown
2.5
CVE-2026-55467
CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)
O
Patch status unknown
6.7
CVE-2025-61915
Vulnerability in Openprinting Cups
O
Patch verified Public Exploits:1EPSS %0
7.5
CVE-2026-34980
Improper input validation in Openprinting Cups
O
Patch verified Public Exploits:2EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-34978"