CVE-2026-87876
LOW3.0CVSS v3
—CVSS v2
0.33%
EPSS (exploit probability)
CWE-178CWE
Description
Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.
CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.