{"id":"CVE-2026-87876","aliases":[],"cve":{"records":[{"id":"CVE-2026-87876","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-09T13:58:06.399Z","published":"2026-09-09T16:12:07.970Z","modified":"2026-11-07T13:41:29.823Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-07T13:41:29.823Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-09T18:11:06.354Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:67568","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87876","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530991","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://github.com/OpenPrinting/cups/commit/88e67c00c130a45f3a1edf36686f7a0b2982fef8","tags":[],"source":"redhat"},{"url":"https://github.com/OpenPrinting/cups/commit/f56844dbe4a54a9f8e1aeb3b913fbee614156bdb","tags":[],"source":"redhat"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2","tags":[],"source":"redhat"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-178","description":"Improper Handling of Case Sensitivity","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-09T18:09:43.830591Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)","titleSource":"redhat","descriptionSource":"redhat","description":"Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.","score":3,"severity":"low","published":"2026-09-09T16:12:07.970Z","modified":"2026-11-07T13:41:29.823Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[{"version":"2.4.19-4.2.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"}],"remediation":[{"text":"Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when/if they become available.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"}],"references":["https://access.redhat.com/errata/RHSA-2026:67568","https://access.redhat.com/security/cve/CVE-2026-87876","https://bugzilla.redhat.com/show_bug.cgi?id=2530991","https://github.com/OpenPrinting/cups/commit/88e67c00c130a45f3a1edf36686f7a0b2982fef8","https://github.com/OpenPrinting/cups/commit/f56844dbe4a54a9f8e1aeb3b913fbee614156bdb","https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2"],"sources":[{"name":"CVE","id":"CVE-2026-87876","modified":"2026-11-07T13:41:29.823Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","score":3}],"sourceAffected":[],"observedAt":"2026-11-07T13:51:16.716Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:20:35.359Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T20:10:34.444Z","attemptedAt":"2026-11-06T20:10:34.444Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-06T20:10:34.754Z","attemptedAt":"2026-11-06T20:10:34.754Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T20:10:33.761Z","attemptedAt":"2026-11-06T20:10:33.761Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-06T20:10:35.177Z","attemptedAt":"2026-11-06T20:10:35.177Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-75089","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75089","modified":"Oct 21, 2026, 8:07:30 PM","score":3,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","checkedAt":"2026-11-06T20:10:33.761Z"},{"source":"NVD","id":"CVE-2026-87876","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87876","modified":"2026-10-21T21:20:12.200","score":3,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","checkedAt":"2026-11-06T20:10:34.444Z"},{"source":"FIRST EPSS","id":"CVE-2026-87876","url":"https://www.first.org/epss/","probability":0.00328,"percentile":0.25999,"date":"2026-11-06","checkedAt":"2026-11-06T20:10:35.177Z"}],"aiSummary":{"text":"CUPS's scheduler has case-insensitive username comparisons that could allow bypass of access controls. The issue affects Red Hat Enterprise Linux versions. An attacker may exploit this weakness in certain configurations.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-07T05:16:01.626Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-87876"}]}}