Vulnerability in PaperCut NG/MF

[ Description ]Official description

An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.

[ Fixes ]Fixes and patches

• Security bulletin: Papercut security-bulletin-sep-2026Vendor patch or bulletin · CERT-FR · papercut.com/kb/Main/security-bulletin-sep-2026, cited by CERT-FR CERTFR-2026-AVI-1223

[ Advisories ]Government CERT advisories

• CERT-FR24 Sep 2026CERTFR-2026-AVI-1223

  Multiple vulnerabilities in Papercut Translated from French

  Multiple vulnerabilities have been discovered in Papercut. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

  CVE-2026-82077CVE-2026-11744CVE-2026-87739+1 more CVEs

[ References ]References

• www.papercut.com/kb/Main/security-bulletin-sep-2026