CVE-2026-27447: Openprinting Cups

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon (cupsd) contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an unprivileged user to gain unauthorized access to restricted operations by using a user with a username that differs only in case from an authorized user. At time of publication, there are no publicly available patches.

Affected products

• Openprinting Cups: up to and including 2.4.16

Published 2026-04-03. Last modified 2026-07-24.