Reported by 2 outlets

Timeline

1. original reporting

   Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS

   gbhackers.com · 40d ago · September 3rd, 2026

   Three high-severity vulnerabilities in HP Easy Start for macOS could allow both local and network-positioned attackers to disrupt the printer software installation process and, under certain conditions, gain privileged access or modify files with root permissions. These vulnerabilities, tracked as CVE-2026-12554, CVE-2026-12555, and CVE-2026-12556, were discovered by researcher Nir Yehoshua from Cipher Security Labs during […] The post Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

2. update from cyberpress.org

   Three HP Easy Start Vulnerabilities Expose macOS Systems to Root-Level Attacks

   cyberpress.org · 40d ago · September 3rd, 2026

   HP addressed the issues in version 2.16.7.260722 under a security bulletin. CVE-2026-12555 is the most direct local privilege-related issue. The flaw affects the HP Easy Start Uninstaller, which used predictable, world-writable file locations in /tmp and /private/tmp after the user approved an administrative elevation prompt. Three HP Easy Start Vulnerabilities An unprivileged user could pre-create symbolic links at the expected log or lock-file locations before the elevated uninstaller starts. If the privileged process follows an attacker-created symlink, it may append generated log content to an attacker-selected file while running with root permissions. Cipher Security Labs characterized the weakness as a privileged file modification or corruption issue, rather than unrestricted arbitrary file write access. Still, the impact may include denial-of-service conditions , corruption of security-sensitive files, or the creation of root-owned files that interfere with normal system operations. The vulnerability carries a CVSS score of 7.7 and