Skip to content
Papercut vulnerabilities
Newest
-
papercut hive
PaperCut Hive Embedded App for Ricoh: Javascript injection
CVE-2026-11744
3.8 Low
-
papercut ng/mf
PaperCut MF/NG: User permissions are not evaluated on report generation
CVE-2026-87739
6.9 Medium
-
papercut ng/mf
PaperCut NG/MF: Remote Code Execution via Scan2Fax
CVE-2026-82077
7.3 High
-
papercut ng/mf
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
CVE-2026-14780
7.5 High
-
papercut mf/ng, mf, ng +1 more +3 more
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVE-2026-82078
In KEVPublic exploit
EPSS 63.0%
9.4 Critical
-
papercut mf/ng, mf, ng +1 more +3 more
PaperCut MF/NG: Authentication Bypass
CVE-2026-81578
In KEVPublic exploit
EPSS 84.7%
8.8 High
-
papercut ng/mf
PaperCut NG/MF: User enumeration via timing attack
CVE-2026-8794
Public exploit
6.9 Medium
-
papercut ng/mf
PaperCut NG/MF: Insufficient brute-force protection
CVE-2026-8793
Public exploit
6.9 Medium
-
papercut print deploy
Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
CVE-2026-6645
7.3 High
-
papercut hive
PaperCut Hive (Ricoh): Plain text password in logs
CVE-2026-7824
5.9 Medium
-
papercut ng/mf, mf, ng +2 more
PaperCut NG/MF: Path Traversal in Shared Account Synchronization
CVE-2026-6418
4.6 Medium
-
papercut mf, ng, ng/mf +2 more
PaperCut MF: Card truncation on HP readers
CVE-2026-6180
4.1 Medium
-
papercut ng/mf, mf, mf konica minolta +2 more
Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
CVE-2026-5115
3.6 Low
-
papercut ng/mf, mf, ng +2 more
Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
CVE-2026-4794
2.1 Low
-
papercut print deploy
Misconfigured certificate validation with self-signed certificates for Print Deploy
CVE-2025-9785
7.7 High
-
papercut mf, ng +1 more
Reflected XSS in PaperCut MF
CVE-2024-9672
6.3 Medium
-
papercut ng
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
CVE-2023-39470
7.2 High
-
papercut mf, ng, ng, papercut mf +2 more
Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder
CVE-2024-8404
7.8 High
-
papercut mf, ng, ng, papercut mf +2 more
Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack
CVE-2024-8405
6.1 Medium
-
papercut mf, ng, ng, papercut mf +2 more
Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler
CVE-2024-4712
7.8 High
-
papercut mf, ng, ng, papercut mf +2 more
Arbitrary File Deletion in PaperCut NG/MF Web Print
CVE-2024-3037
7.8 High
-
papercut ng, mf +1 more
PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability
CVE-2023-39469
EPSS 61.4%
7.2 High
-
papercut mf, ng, ng, papercut mf +2 more
Server Side Request Forgery in PaperCut NG/MF
CVE-2024-1884
EPSS 37.9%
6.5 Medium
-
papercut mf, ng, ng, papercut mf +2 more
Reflected XSS in PaperCut NG/MF
CVE-2024-1883
EPSS 61.5%
6.3 Medium
-
papercut mf, ng, ng, papercut mf +2 more
Server-side resource injection in PaperCut NG/MF
CVE-2024-1882
7.2 High
-
papercut mf, ng, ng, papercut mf +2 more
Unauthorized write operations in PaperCut NG/MF
CVE-2024-1654
7.2 High
-
papercut mf, ng, ng, papercut mf +2 more
Improper authorization controls in PaperCut NG/MF
CVE-2024-1223
4.8 Medium
-
papercut mf, ng, ng, papercut mf +2 more
Incorrect authorization controls in PaperCut NG/MF APIs
CVE-2024-1222
EPSS 64.0%
8.6 High
-
papercut mf, ng, ng, papercut mf +2 more
Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
CVE-2024-1221
3.1 Low
-
papercut ng, ng, papercut mf, mf +2 more
Privilege Escalation Vulnerability
CVE-2023-6006
7.8 High
-
papercut mf, ng +1 more
A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1....
CVE-2023-31046
6.5 Medium
-
papercut mf/ng mobility print, papercut mobility print server +1 more
CSRF in PaperCutNG Mobility Print leads to sophisticated phishing
CVE-2023-2508
5.3 Medium
-
papercut ng
PaperCut NG Unauthenticated XMLRPC
CVE-2023-4568
Public exploit
6.5 Medium
-
papercut mf, ng +1 more
PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables...
CVE-2023-39143
Public exploit
EPSS 80.1%
9.8 Critical
-
papercut ng, mf +1 more
PaperCut NG Unauthenticated File Upload
CVE-2023-3486
EPSS 79.2%
8.2 High
-
papercut ng/mf, mf, ng +2 more
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
CVE-2023-2533
In KEV
EPSS 28.8%
8.4 High
-
papercut ng, ng/mf, mf +2 more
This vulnerability allows remote attackers to bypass authentication on affected installations of...
CVE-2023-27351
In KEV
EPSS 78.1%
8.2 High
-
papercut ng, mf/ng, mf +2 more
This vulnerability allows remote attackers to bypass authentication on affected installations of...
CVE-2023-27350
In KEVPublic exploit
EPSS 100.0%
9.8 Critical
-
papercut mf, ng +1 more
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and...
CVE-2019-12135
9.8 Critical
-
papercut mf, ng +1 more
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user...
CVE-2019-8948
9.8 Critical
-
papercut mf, ng +1 more
Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to...
CVE-2014-2658
5.0 Medium
-
papercut mf
Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build...
CVE-2014-2657
7.5 High
-
papercut mf, ng +1 more
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1...
CVE-2014-2659
6.8 Medium