Improper authentication in Openprinting Cups
CVSS Skor
7.8
EPSS İhtimal
%0.2
Risk Skoru
0.0
Yayın
6 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE-2026-34990 — CUPS <= 2.4.16 Local Privilege Escalation
LPE PoC for CVE-2026-34990 using a CUPS root file write vulnerability.
Local privilege escalation against a root `cupsd`.
Generic PoC for CVE-2026-34990 - CUPS 2.4.16 Local Privilege Escalation via Local token disclosure and arbitrary root file overwrite.
Proof-of-concept research for CVE-2026-34990, a local privilege-escalation vulnerability affecting CUPS. This repository documents the vulnerability mechanics, CUPS/IPP request flow, authentication-token disclosure, the localhost callback technique, and the subsequent privilege-escalation primitive.
https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.
CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token.
İlgili Benzer Açıklar
Vulnerability in Openprinting Cups
Path traversal in Openprinting Cups
Improper input validation in Openprinting Cups
Vulnerability in Openprinting Cups
Incorrect authorization in Openprinting Cups
Uncontrolled resource consumption in Openprinting Cups
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-34990"