CVE-2026-14544 (CVSS 9.8) — A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary cod

A critical vulnerability, CVE-2026-14544, has been published with a CVSS score of 9.8, indicating a severe security flaw in HPLIP, the HP Linux Imaging and Printing Software. This issue represents an incomplete fix for a prior vulnerability, CVE-2026-8631, and could allow a remote attacker to escalate privileges or execute arbitrary code on affected systems. The disclosure was made on July 3, 2026, via the National Vulnerability Database, and requires immediate attention due to its high potential for exploitation.

Organizations using Linux-based systems with HP printers or multifunction devices are directly affected, particularly those in sectors such as finance, healthcare, government, and manufacturing where printing infrastructure is integrated into sensitive networks. Any entity relying on HPLIP for printer management, including IT service providers and enterprise environments, should consider themselves at risk. The vulnerability does not require local access, making remote exploitation a significant threat to network security.

Compliance teams should immediately verify whether HPLIP is installed in their environments and check for vendor patches or updated versions that address CVE-2026-14544. Until a fix is applied, consider isolating affected systems from untrusted networks, restricting remote access to printing services, and monitoring for unusual activity. This finding should be logged in your vulnerability management system and prioritized for remediation under relevant regulatory frameworks, such as GDPR or NIS2, given the potential for data compromise or service disruption.