Do Son A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.
CUPS
Details and PoC exploit code for CVE-2026-39875 are now public. This macOS privilege escalation flaw lets a malicious app gain root. Patch now.
New patches for CUPS, the open-source Linux printing system, fix two flaws that can lead to remote DoS and authentication bypass.
Learn about the critical vulnerabilities in CUPS and how Marcus Hutchins' open-source tool can help you detect and mitigate the CVE-2024-47176 vulnerability.
Learn about a new attack vector exploiting vulnerabilities in CUPS. Find out how printers can be used to launch large-scale DDoS attacks.