Cpe:2.3:a:openprinting:cups-Browsed:2.0.1:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aopenprintingcups-browsed2.0.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 12 Aug 2026 16:45:30 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote Code Execution Vulnerability in CUPShttps://feed.craftedsignal.io/briefs/2026-08-cups-rce/Wed, 12 Aug 2026 16:45:30 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-cups-rce/A vulnerability in the cups-browsed service allows a local attacker to achieve arbitrary code execution via malicious print queue discovery packets.The Common Unix Printing System (CUPS) is affected by a security flaw, identified as CVE-2024-47176, which resides in the cups-browsed service. This service is responsible for discovering printers on a network. The vulnerability arises from improper handling of packet data received during the printer discovery process. A local attacker can craft malicious discovery packets that, when processed by cups-browsed, lead to the execution of arbitrary commands on the host system. Given that cups-browsed often runs with elevated privileges, this flaw poses a significant risk for privilege escalation and system compromise on affected Linux systems. Defenders should prioritize patching the CUPS stack and reviewing the necessity of the cups-browsed service in their environment.

Impact

Successful exploitation allows a local attacker to execute arbitrary code with the privileges of the cups-browsed service. This can lead to full system compromise, unauthorized data access, and persistence on the affected machine. This vulnerability affects Linux systems where CUPS and the associated cups-browsed service are deployed, potentially impacting enterprise workstations, servers, and embedded devices that utilize standard Linux printing configurations.

Recommendation

  • Update the CUPS package to the latest version provided by your Linux distribution maintainer to address CVE-2024-47176.
  • Disable the cups-browsed service if network printer discovery is not required for the system function.
  • Review network configurations to restrict access to CUPS discovery ports if the service must remain enabled.
]]>highadvisoryvulnerabilityrcelinux