https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T07:58:10.266966+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105326 fkie_cve-2026-105326 2026-10-07T07:58:10.269994+00:00

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with "-" to influence sendmail behavior. Successful exploitation depends on the installed mail transfer agent and CUPS network exposure, and may lead to execution of attacker-controlled commands with the privileges of the CUPS service user.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-105326 UBUNTU-CVE-2026-105326 2026-10-07T07:58:10.270116+00:00

Affected: Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.04:LTS: cups

(An argument injection flaw was found in CUPS. When email notification ...)