Spooler Alert: Remote Unauth'd RCE-to-root Chain in CUPS

TLDR: my self-orchestrating team of vulnerability hunting agents discovered two issues in CUPS, CVE-2026-34980 and CVE-2026-34990 , chainable into unauthenticated remote attacker -> unprivileged RCE -> root file (over)write . See below for the prerequisites, details, and mitigation options. &#xA;&#xA; Intro&#xA; &#xA; &#xA; &#xA; # &#xA; &#xA; &#xA; &#xA; CUPS is the standard way to do printing on…