Vendor

    PaperCut

    43 known vulnerabilities in products by PaperCut, 5 of them actively exploited (CISA KEV).

    Key figures

    43

    Vulnerabilities

    5

    Actively exploited (KEV)

    2

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in PaperCut
    CriticalCVE-2023-27350

    PaperCut MF/NG Improper Access Control Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2026-81578

    PaperCut MF/NG: Authentication Bypass

    In CISA KEV

    		9.8
    CriticalCVE-2026-82078

    PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

    In CISA KEV

    		9.1
    CriticalCVE-2023-27351

    PaperCut NG/MF Improper Authentication Vulnerability

    In CISA KEVRansomware

    		8.2
    CriticalCVE-2023-2533

    PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

    In CISA KEV

    		8.4
    CriticalCVE-2023-39143

    PaperCut MF: Path Traversal

    		9.8
    CriticalCVE-2024-1222

    Incorrect authorization controls in PaperCut NG/MF APIs

    		8.6
    HighCVE-2023-3486

    PaperCut NG Unauthenticated File Upload

    		8.2
    HighCVE-2023-39469

    PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

    		7.2
    MediumCVE-2024-1884

    Server Side Request Forgery in PaperCut NG/MF

    		6.5
    MediumCVE-2024-1883

    Reflected XSS in PaperCut NG/MF

    		6.3
    CriticalCVE-2019-8948

    PaperCut MF: security vulnerability

    		9.8
    CriticalCVE-2019-12135

    PaperCut MF: Code Execution

    		9.8
    MediumCVE-2023-4568

    PaperCut NG Unauthenticated XMLRPC

    		6.5
    HighCVE-2026-82077

    PaperCut NG/MF: Remote Code Execution via Scan2Fax

    		—
    HighCVE-2023-39470

    PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

    		7.2
    HighCVE-2024-1882

    Server-side resource injection in PaperCut NG/MF

    		7.2
    HighCVE-2024-1654

    Unauthorized write operations in PaperCut NG/MF

    		7.2
    MediumCVE-2023-31046

    PaperCut MF: Path Traversal

    		6.5
    MediumCVE-2026-8793

    PaperCut NG/MF: Insufficient brute-force protection

    		—
    MediumCVE-2026-8794

    PaperCut NG/MF: User enumeration via timing attack

    		—
    MediumCVE-2026-87739

    PaperCut MF/NG: User permissions are not evaluated on report generation

    		—
    HighCVE-2026-14780

    PaperCut NG/MF: Remote Code Execution via Scripting Subsystem

    		—
    HighCVE-2026-6180

    PaperCut MF: Card truncation on HP readers

    		8.1
    MediumCVE-2026-6418

    PaperCut NG/MF: Path Traversal in Shared Account Synchronization

    		4.9

    All vulnerabilities in search

    News

    Products

    Products by PaperCut
    PaperCut MF325
    PaperCut NG325
    Papercut Ng, Papercut Mf120
    Papercut Ng/mf101
    PaperCut NG42