Product by PaperCut
PaperCut MF
31 known vulnerabilities in PaperCut MF (PaperCut), 5 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
5
Actively exploited (KEV)
2
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-27350 | PaperCut MF/NG Improper Access Control Vulnerability In CISA KEVRansomwarealso in 2 other products | 9.8 | |
| Critical | CVE-2026-81578 | PaperCut MF/NG: Authentication Bypass In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-82078 | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector In CISA KEValso in 1 other product | 9.1 | |
| Critical | CVE-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability In CISA KEVRansomwarealso in 2 other products | 8.2 | |
| Critical | CVE-2023-2533 | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF In CISA KEValso in 2 other products | 8.4 | |
| Critical | CVE-2023-39143 | PaperCut MF: Path Traversal | 9.8 | |
| Critical | CVE-2024-1222 | Incorrect authorization controls in PaperCut NG/MF APIs | 8.6 | |
| High | CVE-2023-3486 | PaperCut NG Unauthenticated File Upload | 8.2 | |
| High | CVE-2023-39469 | PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability | 7.2 | |
| Medium | CVE-2024-1884 | Server Side Request Forgery in PaperCut NG/MF | 6.5 | |
| Medium | CVE-2024-1883 | Reflected XSS in PaperCut NG/MF | 6.3 | |
| Critical | CVE-2019-8948 | PaperCut MF: security vulnerability | 9.8 | |
| Critical | CVE-2019-12135 | PaperCut MF: Code Execution | 9.8 | |
| High | CVE-2024-1882 | Server-side resource injection in PaperCut NG/MF | 7.2 | |
| High | CVE-2024-1654 | Unauthorized write operations in PaperCut NG/MF | 7.2 | |
| Medium | CVE-2023-31046 | PaperCut MF: Path Traversal | 6.5 | |
| High | CVE-2026-6180 | PaperCut MF: Card truncation on HP readers | 8.1 | |
| Medium | CVE-2026-6418 | PaperCut NG/MF: Path Traversal in Shared Account Synchronization | 4.9 | |
| High | CVE-2024-4712 | Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler | 7.8 | |
| High | CVE-2024-8404 | Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder | 7.8 | |
| High | CVE-2026-5115 | Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | 7.5 | |
| High | CVE-2024-3037 | Arbitrary File Deletion in PaperCut NG/MF Web Print | 7.8 | |
| High | CVE-2023-6006 | Privilege Escalation Vulnerability | 7.8 | |
| Medium | CVE-2024-1223 | Improper authorization controls in PaperCut NG/MF | 4.8 | |
| Not rated | CVE-2014-2658 | PaperCut MF: Denial of Service | — |
News
- Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universitiesthehackernews,
- PaperCut Exploitation Escalates to Active Intrusionssecurityweek,
- More Details Emerge on Exploited PaperCut Vulnerabilitiessecurityweek,
- Ten CVEs Added to CISA KEV, Four with a Three-day Mitigation Windowsans-newsbites-mail,