Product by PaperCut
Papercut Ng/mf
10 known vulnerabilities in Papercut Ng/mf (PaperCut), 1 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-2533 | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF In CISA KEValso in 2 other products | 8.4 | |
| High | CVE-2026-82077 | PaperCut NG/MF: Remote Code Execution via Scan2Fax | — | |
| Medium | CVE-2026-8793 | PaperCut NG/MF: Insufficient brute-force protection | — | |
| Medium | CVE-2026-8794 | PaperCut NG/MF: User enumeration via timing attack | — | |
| Medium | CVE-2026-87739 | PaperCut MF/NG: User permissions are not evaluated on report generation | — | |
| High | CVE-2026-14780 | PaperCut NG/MF: Remote Code Execution via Scripting Subsystem | — | |
| High | CVE-2026-6180 | PaperCut MF: Card truncation on HP readers | 8.1 | |
| Medium | CVE-2026-6418 | PaperCut NG/MF: Path Traversal in Shared Account Synchronization | 4.9 | |
| High | CVE-2026-5115 | Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | 7.5 | |
| Medium | CVE-2026-4794 | Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF | 4.8 |