[ Vendor · 9 CVEs ]
PaperCut
CVEs affecting PaperCut published in the last 30 days, plus any PaperCut CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-87739 | 24 Sep 2026 | CVSS 6.9 | PaperCut NG/MFAn improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting… | Fix |
| CVE-2026-82077 | 24 Sep 2026 | CVSS 7.3 | PaperCut NG/MFAn improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and… | Fix |
| CVE-2026-11744 | 24 Sep 2026 | CVSS 3.8 | PaperCut HiveAn input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize… | Fix |
| CVE-2026-14780 | 24 Sep 2026 | CVSS 7.5 | PaperCut NG/MFA vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions… | Fix |
| CVE-2026-82078 | 28 Aug 2026 | CVSS 9.1 | PaperCut NG/MF Unsafe ReflectionAn unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application… | ExploitedFix |
| CVE-2026-81578 | 28 Aug 2026 | CVSS 9.8 | PaperCut NG/MF Missing Authentication for Critical FunctionAn improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions… | ExploitedFix |
| CVE-2023-2533 | 20 Jun 2023 | CVSS 8.8 | PaperCut NG/MF Cross-Site Request Forgery (CSRF)A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable… | Exploited |
| CVE-2023-27350 | 20 Apr 2023 | CVSS 9.8 | PaperCut MF/NG Improper Access ControlThis vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is… | Exploited |
| CVE-2023-27351 | 20 Apr 2023 | CVSS 7.5 | PaperCut NG/MF Improper AuthenticationThis vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is… | Exploited |