CVE-2026-107886
Low
Description
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges.
SeverityLow
CVSS2.3
Exploit probability—
Product
Openprinting Cups
PublishedOct 9, 2026
First seenOct 9, 2026
Weakness typeCWE-415CWE-415
How to fix
Update
- openprinting cups2.4.20 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openprinting cups | 1.4.8 ≤ v < 2.4.20 | 2.4.20 |
| microsoft azl3_cups_2.4.19-1 | No range specified | — |
| microsoft azl3_cups_2.4.19-2 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.