Papercut Ng vulnerabilities

• papercut ng/mf PaperCut MF/NG: User permissions are not evaluated on report generation CVE-2026-87739 6.9 MediumSeptember 24, 2026
• papercut ng/mf PaperCut NG/MF: Remote Code Execution via Scan2Fax CVE-2026-82077 7.3 HighSeptember 24, 2026
• papercut ng/mf PaperCut NG/MF: Remote Code Execution via Scripting Subsystem CVE-2026-14780 7.5 HighSeptember 24, 2026
• papercut mf/ng, mf, ng +1 more +3 more PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector CVE-2026-82078 In KEVPublic exploit EPSS 63.0% 9.4 CriticalAugust 28, 2026
• papercut mf/ng, mf, ng +1 more +3 more PaperCut MF/NG: Authentication Bypass CVE-2026-81578 In KEVPublic exploit EPSS 84.7% 8.8 HighAugust 28, 2026
• papercut ng/mf PaperCut NG/MF: User enumeration via timing attack CVE-2026-8794 Public exploit 6.9 MediumAugust 3, 2026
• papercut ng/mf PaperCut NG/MF: Insufficient brute-force protection CVE-2026-8793 Public exploit 6.9 MediumAugust 3, 2026
• papercut ng/mf, mf, ng +2 more PaperCut NG/MF: Path Traversal in Shared Account Synchronization CVE-2026-6418 4.6 MediumMay 5, 2026
• papercut mf, ng, ng/mf +2 more PaperCut MF: Card truncation on HP readers CVE-2026-6180 4.1 MediumMay 5, 2026
• papercut ng/mf, mf, mf konica minolta +2 more Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices CVE-2026-5115 3.6 LowMarch 31, 2026
• papercut ng/mf, mf, ng +2 more Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF CVE-2026-4794 2.1 LowMarch 31, 2026
• papercut mf, ng +1 more Reflected XSS in PaperCut MF CVE-2024-9672 6.3 MediumDecember 9, 2024
• papercut ng PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability CVE-2023-39470 7.2 HighNovember 22, 2024
• papercut mf, ng, ng, papercut mf +2 more Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder CVE-2024-8404 7.8 HighSeptember 26, 2024
• papercut mf, ng, ng, papercut mf +2 more Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack CVE-2024-8405 6.1 MediumSeptember 26, 2024
• papercut mf, ng, ng, papercut mf +2 more Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler CVE-2024-4712 7.8 HighMay 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Arbitrary File Deletion in PaperCut NG/MF Web Print CVE-2024-3037 7.8 HighMay 14, 2024
• papercut ng, mf +1 more PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability CVE-2023-39469 EPSS 61.4% 7.2 HighMay 3, 2024
• papercut mf, ng, ng, papercut mf +2 more Server Side Request Forgery in PaperCut NG/MF CVE-2024-1884 EPSS 37.9% 6.5 MediumMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Reflected XSS in PaperCut NG/MF CVE-2024-1883 EPSS 61.5% 6.3 MediumMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Server-side resource injection in PaperCut NG/MF CVE-2024-1882 7.2 HighMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Unauthorized write operations in PaperCut NG/MF CVE-2024-1654 7.2 HighMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Improper authorization controls in PaperCut NG/MF CVE-2024-1223 4.8 MediumMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Incorrect authorization controls in PaperCut NG/MF APIs CVE-2024-1222 EPSS 64.0% 8.6 HighMarch 14, 2024
• papercut mf, ng, ng, papercut mf +2 more Improper access controls on APIs on Linux and macOS in PaperCut NG/MF CVE-2024-1221 3.1 LowMarch 14, 2024
• papercut ng, ng, papercut mf, mf +2 more Privilege Escalation Vulnerability CVE-2023-6006 7.8 HighNovember 14, 2023
• papercut mf, ng +1 more A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1.... CVE-2023-31046 6.5 MediumOctober 19, 2023
• papercut ng PaperCut NG Unauthenticated XMLRPC CVE-2023-4568 Public exploit 6.5 MediumSeptember 13, 2023
• papercut mf, ng +1 more PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables... CVE-2023-39143 Public exploit EPSS 80.1% 9.8 CriticalAugust 4, 2023
• papercut ng, mf +1 more PaperCut NG Unauthenticated File Upload CVE-2023-3486 EPSS 79.2% 8.2 HighJuly 25, 2023
• papercut ng/mf, mf, ng +2 more PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF CVE-2023-2533 In KEV EPSS 28.8% 8.4 HighJune 20, 2023
• papercut ng, ng/mf, mf +2 more This vulnerability allows remote attackers to bypass authentication on affected installations of... CVE-2023-27351 In KEV EPSS 78.1% 8.2 HighApril 20, 2023
• papercut ng, mf/ng, mf +2 more This vulnerability allows remote attackers to bypass authentication on affected installations of... CVE-2023-27350 In KEVPublic exploit EPSS 100.0% 9.8 CriticalApril 20, 2023
• papercut mf, ng +1 more An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and... CVE-2019-12135 9.8 CriticalJune 6, 2019
• papercut mf, ng +1 more PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user... CVE-2019-8948 9.8 CriticalFebruary 20, 2019
• papercut mf, ng +1 more Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to... CVE-2014-2658 5.0 MediumApril 28, 2014
• papercut mf, ng +1 more Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1... CVE-2014-2659 6.8 MediumApril 22, 2014