CVE-2026-95511

Name of the Vulnerable Software and Affected Versions CUPS and cups-filters (affected versions not specified)

Description A privilege escalation issue exists in CUPS when used with the cups-filters serial backend. A local user with lpadmin group membership can configure a printer using a privileged serial backend. Because the CUPS scheduler fails to restrict the path component of non-file device URIs, the root-privileged backend can be manipulated to write attacker-controlled print data to an arbitrary file. This allows an attacker to modify security-sensitive CUPS configurations and achieve root code execution, provided a serial backend binary with root-only permissions is installed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.