Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:58:09 +0000 fkie_cve-2026-105326 https://vulnerability.circl.lu/vuln/fkie_cve-2026-105326 <p>An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with &#34;-&#34; to influence sendmail behavior. Successful exploitation depends on the installed mail transfer agent and CUPS network exposure, and may lead to execution of attacker-controlled commands with the privileges of the CUPS service user.</p> <p>An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot be interpreted as command-line options. A remote attacker who can reach the CUPS service could supply a crafted recipient value starting with &#34;-&#34; to influence sendmail behavior. Successful exploitation depends on the installed mail transfer agent and CUPS network exposure, and may lead to execution of attacker-controlled commands with the privileges of the CUPS service user.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-105326 UBUNTU-CVE-2026-105326 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-105326 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.04:LTS: cups</p> <p>(An argument injection flaw was found in CUPS. When email notification ...)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.04:LTS: cups</p> <p>(An argument injection flaw was found in CUPS. When email notification ...)</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-105326