Improper authentication in Openprinting Cups
CVSS score
7.8
EPSS probability
%0.2
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token.
Proof-of-concept research for CVE-2026-34990, a local privilege-escalation vulnerability affecting CUPS. This repository documents the vulnerability mechanics, CUPS/IPP request flow, authentication-token disclosure, the localhost callback technique, and the subsequent privilege-escalation primitive.
Generic PoC for CVE-2026-34990 - CUPS 2.4.16 Local Privilege Escalation via Local token disclosure and arbitrary root file overwrite.
CVE-2026-34990 — CUPS <= 2.4.16 Local Privilege Escalation
CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.
LPE PoC for CVE-2026-34990 using a CUPS root file write vulnerability.
Local privilege escalation against a root `cupsd`.
https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-34990"