fyi the guy who's hyping up the supposed "unauthenticated RCE" impacting all systems is a self-aggrandizing domestic assault perpetrator trying to draw attention to himself; successful exploitation of the so-called vuln depends on ability to edit /etc/cups/cupsd.conf, which generally already requires administrator privileges
and here he is being verbally abusive in a github issue: https://github.com/OpenPrinting/cups-browsed/issues/36