Sploitus

CVE-2026-87876

No indexed exploits for CVE-2026-87876 yet

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.

Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Openshift Container Platform 4
Fix
Available
CVSS 3.1
3.0 LOW
Weakness
CWE-178
NVD status
Awaiting Analysis
Published
2026-09-09

Workaround

Fixed on upstream master branch with commit f56844d and for versions 2.4.x with commit 88e67c0.

CVE-2026-87876 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-87876 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-87876 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.