CVE-2026-87876

Name of the Vulnerable Software and Affected Versions CUPS (affected versions not specified)

Description Case-insensitive comparisons on request-derived usernames within the scheduler, specifically during printer ACL validation and private-attribute filtering, may allow the bypass of username-based access controls in certain configurations. This occurs because these comparisons happen outside the main authorization path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.