Search: CVE-2026-91099

CVE-2026-91099 is a medium severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) involving symbolic link (symlink) following (CWE-61). Multiple vulnerabilities were identified and remediated by HP affecting several components that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The affected versions are those prior to 3.26.6. The CVSS 4.0 base score is 5.1, indicating a medium impact. No known exploits are reported in the wild. HP has remediated these issues, but no direct patch link is provided in the data.