Blog

Security Research

Critical Linux RCE Vulnerability in CUPS — What We Know and How to Prepare

A critical remote code execution vulnerability chain, which is believed to affect many Unix-like hosts, was disclosed on September 26, 2024.

Originally published September 27, 2024; updated April 2025

Executive summary

\r\n A critical remote code execution (RCE) vulnerability chain, which is believed to affect many UNIX-like hosts, was disclosed on September 26, 2024.

\r\n

\r\n The vulnerable component is the Common Unix Printing System (CUPS), specifically cups-browsed .

\r\n

\r\n A chain of four vulnerabilities is required for a successful exploitation: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177.

\r\n

\r\n In this blog post, Akamai shares details about the vulnerability, analyzes the technical disclosure, and provides recommendations for what can be done to effectively prepare and mitigate the risks while waiting for a patch.

\r\n

\r\n \r\n"}}"> A critical remote code…