Red Hat Product Security issued an advisory (RHSA-2026:0464) for CUPS in Red Hat Enterprise Linux 10 addressing two vulnerabilities: CVE-2025-61915, a local denial-of-service caused by cupsd.conf update and related issues, and CVE-2025-58436, a potential denial-of-service triggered by slow client communication. The advisory rates the security impact as Moderate and provides updated packages to remediate these issues. No CVSS scores are provided in the advisory, but the vulnerabilities relate to denial-of-service conditions. The update is available for multiple architectures of Red Hat Enterprise Linux 10 and its Extended Update Support versions.

Successful exploitation of these vulnerabilities could cause denial-of-service conditions on affected systems running CUPS, potentially disrupting printing services. CVE-2025-61915 allows local denial-of-service via configuration updates, while CVE-2025-58436 could be triggered remotely by slow client communication leading to service disruption. There are no known exploits in the wild at this time.

Red Hat has released official security updates for CUPS in Red Hat Enterprise Linux 10 and its Extended Update Support versions. Users should apply the updated packages as described in Red Hat advisory RHSA-2026:0464 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. Patch status is confirmed with official fixes available. No additional mitigation actions are indicated by the vendor.