Open Source CUPS

Name: Open Source CUPS
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical2high11medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-47076US	high8.6	79.9% (100th)	Exploit	no fix	2024-09-26	≤ 2.0.1
CVE-2024-47175US	critical9.8	63.6% (99th)	Exploit	no fix	2024-09-26	≤ 2.0.1
CVE-2024-47176US	—	50.6% (99th)	Exploit	no fix	2024-09-26	≤ 2.0.1
CVE-2026-34980US	high7.5	1.57% (75th)	Exploit	2.4.17	2026-04-03	< 2.4.17
CVE-2025-58060US	—	1.00% (63rd)	Exploit	2.4.13	2025-09-11	< 2.4.13
CVE-2024-47177US	—	—	Exploit	no fix	2024-09-26	≤ 2.0.1
CVE-2024-35235US	medium6.7	2.42% (84th)	—	2.4.9	2024-06-11	< 2.4.9
CVE-2024-47850US	—	0.85% (58th)	—	no fix	2024-10-04	≤ cups-browsed <2.5b1
CVE-2026-64612US	—	0.70% (53rd)	—	no fix	2026-07-20	2 versions
CVE-2025-61915US	medium6.7	0.46% (40th)	—	2.4.15	2025-11-29	< 2.4.15
CVE-2026-61702US	—	0.42% (37th)	—	2.4.20	2026-10-15	4 versions
CVE-2026-41079US	medium5.4	0.41% (35th)	—	2.4.17	2026-04-24	< 2.4.17
CVE-2026-34978US	—	0.41% (35th)	—	2.4.17	2026-04-03	< 2.4.17
CVE-2026-27447US	medium6.3OT elevated	0.28% (21st)	—	2.4.17	2026-04-03	< 2.4.17
CVE-2026-107655US	medium4.0	0.25% (16th)	—	2.4.20	2026-10-09	4 versions
CVE-2026-107886US	medium6.5	0.24% (15th)	—	2.4.20	2026-10-09	< 2.4.20
CVE-2025-58436US	medium5.5	0.23% (14th)	—	2.4.15	2025-11-29	< 2.4.15
CVE-2026-55480US	—	0.20% (10th)	—	2.4.20	2026-10-15	< 2.4.20
CVE-2026-55453US	—	0.19% (9th)	—	2.4.20	2026-10-15	< 2.4.20
CVE-2026-55467US	—	0.18% (8th)	—	2.4.20	2026-10-15	< 2.4.20
CVE-2026-39316US	medium6.2	0.18% (7th)	—	no fix	2026-04-07	≤ 2.4.16
CVE-2026-39314US	medium6.2	0.15% (4th)	—	no fix	2026-04-07	≤ 2.4.16
CVE-2026-107890US	medium5.5	0.15% (4th)	—	no fix	2026-10-09	≤ 2.4.19
CVE-2026-107888US	medium5.5	0.13% (3rd)	—	no fix	2026-10-09	≤ 2.4.19

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-124Buffer Underwrite ('Buffer Underflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan