On September 27, 2024, security researcher Simone "evilsocket" Margaritelli reported on his personal blog that the Unix-based printing framework CUPS has multiple high-risk security vulnerabilities[1]. Unauthenticated remote attackers can impersonate printers, using malicious IPP URLs to replace the URLs of existing printers or add new malicious printers. In this scenario, when a user initiates a print job from the affected computer, attackers can silently execute arbitrary commands on that computer through the fake printer URL, thereby achieving the attack. These vulnerabilities have been confirmed by the upstream software maintainers and security personnel, and temporary measures have been taken to disable ...Read more