Publicly available cybersecurity incident reports or news articles

CUPS Vulnerability Exposes 75,000 Systems to Remote Command Execution

Sep 26, 2024, 09:33 PM

A significant security vulnerability has been identified in the Common UNIX Printing System (CUPS), which could allow remote unauthenticated attackers to execute arbitrary commands on affected systems. The vulnerability involves the replacement of existing printers’ IPP URLs with malicious ones, leading to command execution when a print job is initiated. This issue affects numerous systems, including macOS, which runs CUPS by default. There are currently at least 75,000 exposed CUPS daemons on the internet. Experts recommend disabling or removing CUPS if printing is not required to mitigate the risk. Apple bought CUPS in 2007, and OpenPrinting forked it in 2020.