Vulnerability in Red Hat Enterprise Linux 10

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.

CVSS v3 metric

CVSS v3 base score 3.0 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-87876?
CVE-2026-87876 is a low-severity vulnerability in Red Hat Enterprise Linux 10, classified under Improper Handling of Case Sensitivity. CVSS score: 3.0/10. Published 2026-09-09.
How severe is CVE-2026-87876?
Low severity. CVSS v3 base score is 3.0 out of 10.