CVE-2025-58060 - CVE House
Back to Database
Status published High CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

Vulnerability Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58060

Credits & Attribution

No credits recorded in the NVD database.

References

More from OpenPrinting

View All →
CVE-2025-64524
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
Low 3.3
CVE-2025-64503
[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster
Medium 4
CVE-2025-61915
OpenPrinting CUPS vulnerable to stack based out-of-bound write
Medium 6
CVE-2025-58436
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
Medium 5.1
CVE-2025-58364
cups: Remote DoS via null dereference
Medium 6.5

Affected Vendor

OpenPrinting

View all reports →

Affected Software

cups
Vulnerable Versions:
< 2.4.13

Timeline

Official Publish: September 11th, 2025
Last Modified: November 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access