CVE-2026-107885

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-10-09 · updated 2026-10-20
Weakness: CWE-770

Description

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.

Affected products

OpenPrinting cups: before 2.4.21 — fixed in 2.4.21

How to fix

Upgrade to a fixed version: OpenPrinting cups 2.4.21. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-107885 or the next vulnerability affects your stack