8

CVE-2025-58060: openprinting cups Improper Authentication

CVSS: 8.0v3.1HighModified
AliasesALPINE-CVE-2025-58060RHSA-2025:15702RHSA-2025:17049
Published 11-09-2025Last modified 04-11-2025
Open JSON

Vulnerability summary

CVE-2025-58060 is a high (CVSS 8.0) Improper Authentication vulnerability in openprinting cups. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
42/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.0/10
010
High · v3.1 (CVE.org)
EPSS score
0.97%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 18 · Related 9
DLA-4298-1DSA-5998-1MGASA-2026-0001OPENSUSE-SU-2025:15562-1OPENSUSE-SU-2026:20172-1RHSA-2025:15700

Timeline

  1. 11-09-2025
    PublishedVulnerability first disclosed.
  2. 04-11-2025
    Last modifiedVulnerability information updated.

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

0.97%

Chance of exploitation in the next 30 days

Percentile

61%

Versus all other CVEs

30-day change

0.00 pp

From 0.97% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Cups

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat13 products
  • cups< 1:2.2.6-63.el8_10 | < 1:2.2.6-51.el8_8.5 | < 1:1.6.3-52.el7_9.1 | < 1:2.2.6-38.el8_4.3 | < 1:2.2.6-45.el8_6.6 | < 1:2.2.6-33.el8_2.3
  • cups-client< 1:2.2.6-63.el8_10 | < 1:2.2.6-51.el8_8.5 | < 1:1.6.3-52.el7_9.1 | < 1:2.2.6-38.el8_4.3 | < 1:2.2.6-45.el8_6.6 | < 1:2.2.6-33.el8_2.3
  • cups-client-debuginfo< 1:2.2.6-63.el8_10 | < 1:2.2.6-51.el8_8.5 | < 1:2.2.6-38.el8_4.3 | < 1:2.2.6-45.el8_6.6 | < 1:2.2.6-33.el8_2.3
  • cups-debuginfo< 1:2.2.6-63.el8_10 | < 1:2.2.6-51.el8_8.5 | < 1:1.6.3-52.el7_9.1 | < 1:2.2.6-38.el8_4.3 | < 1:2.2.6-45.el8_6.6 | < 1:2.2.6-33.el8_2.3
  • cups-debugsource< 1:2.2.6-63.el8_10 | < 1:2.2.6-51.el8_8.5 | < 1:2.2.6-38.el8_4.3 | < 1:2.2.6-45.el8_6.6 | < 1:2.2.6-33.el8_2.3
Alpine1 product
  • cups< 2.4.16-r0 | < 2.4.13-r0
Debian1 product
  • cups< 2.4.2-3+deb12u9 | < 2.4.10-3+deb13u1 | < 2.4.10-4
Openprinting1 product
Ubuntu1 product
  • cups< 2.1.3-4ubuntu0.11+esm9 | < 2.2.7-1ubuntu2.10+esm7 | < 2.3.1-9ubuntu1.9+esm1 | < 2.4.1op1-1ubuntu4.12 | < 2.4.7-1.2ubuntu7.4

5 vendors · 17 products

References

26 links
Show all 26 references