Vulnerability in PaperCut NG/MF

[ Description ]Official description

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information.

[ Fixes ]Fixes and patches

• Security bulletin: Papercut security-bulletin-sep-2026Vendor patch or bulletin · CERT-FR · papercut.com/kb/Main/security-bulletin-sep-2026, cited by CERT-FR CERTFR-2026-AVI-1223

[ Advisories ]Government CERT advisories

• CERT-FR24 Sep 2026CERTFR-2026-AVI-1223

  Multiple vulnerabilities in Papercut Translated from French

  Multiple vulnerabilities have been discovered in Papercut. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

  CVE-2026-82077CVE-2026-11744CVE-2026-87739+1 more CVEs

[ References ]References

• www.papercut.com/kb/Main/security-bulletin-sep-2026