en
A multinational print-management software maker focused on enterprise and education sectors, providing centralized control over print workflows via on-premises servers and optional cloud-capable components. It operates as a software vendor with a broad footprint in managed print services.
Severity across 30 analyzed records
The GCVE catalog currently lists 39 vulnerability records associated with PaperCut.
Among the 30 records analyzed by CyStack, 17 are High or Critical and 5 appear in the CISA KEV catalog for priority remediation.
PaperCut is a global print-management provider offering on-premises software for tracking, controlling, and billing print, copy, and scan activity across organizations. Its NG/MF lineage serves mixed environments with server-based administration and driverless printing capabilities, widely deployed in educational and enterprise settings.
PaperCut MF/NG
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-82078PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector | Exploitation statusKEV | FixYes | Affected productPaperCut MF/NG | Published08/28/2026 | SeverityCritical |
CVE-2026-81578PaperCut MF/NG: Authentication Bypass | Exploitation statusKEV | FixYes | Affected productPaperCut MF/NG | Published08/28/2026 | SeverityHigh |
CVE-2026-8794PaperCut NG/MF: User enumeration via timing attack | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published08/03/2026 | SeverityMedium |
CVE-2026-8793PaperCut NG/MF: Insufficient brute-force protection | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published08/03/2026 | SeverityMedium |
CVE-2026-6645Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows | Exploitation statusNot known exploited | FixYes | Affected productPrint Deploy | Published06/22/2026 | SeverityHigh |
CVE-2026-7824PaperCut Hive (Ricoh): Plain text password in logs | Exploitation statusNot known exploited | FixYes | Affected productPaperCut Hive | Published05/05/2026 | SeverityMedium |
CVE-2026-6418PaperCut NG/MF: Path Traversal in Shared Account Synchronization | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published05/05/2026 | SeverityMedium |
CVE-2026-6180PaperCut MF: Card truncation on HP readers | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published05/05/2026 | SeverityMedium |
CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published03/31/2026 | SeverityLow |
CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG/MF | Published03/31/2026 | SeverityLow |
CVE-2025-9785Misconfigured certificate validation with self-signed certificates for Print Deploy | Exploitation statusNot known exploited | FixYes | Affected productPrint Deploy | Published09/03/2025 | SeverityHigh |
CVE-2024-9672Reflected XSS in PaperCut MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut MF | Published12/09/2024 | SeverityMedium |
CVE-2023-39470PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productNG | Published11/22/2024 | SeverityHigh |
CVE-2024-8404Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published09/26/2024 | SeverityHigh |
CVE-2024-8405Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published09/26/2024 | SeverityMedium |
CVE-2024-4712Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published05/14/2024 | SeverityHigh |
CVE-2024-3037Arbitrary File Deletion in PaperCut NG/MF Web Print | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published05/14/2024 | SeverityHigh |
CVE-2023-39469PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productNG | Published05/03/2024 | SeverityHigh |
CVE-2024-1884Server Side Request Forgery in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityMedium |
CVE-2024-1883Reflected XSS in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityMedium |
CVE-2024-1882Server-side resource injection in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityHigh |
CVE-2024-1654Unauthorized write operations in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityHigh |
CVE-2024-1223Improper authorization controls in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityMedium |
CVE-2024-1222Incorrect authorization controls in PaperCut NG/MF APIs | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityHigh |
CVE-2024-1221Improper access controls on APIs on Linux and macOS in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published03/14/2024 | SeverityLow |
CVE-2023-6006Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productPaperCut NG, PaperCut MF | Published11/14/2023 | SeverityHigh |
CVE-2023-31046CVE-2023-31046 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/19/2023 | SeverityUnknown |
CVE-2023-2508CSRF in PaperCutNG Mobility Print leads to sophisticated phishing | Exploitation statusNot known exploited | FixNot confirmed | Affected productMobility Print | Published09/20/2023 | SeverityMedium |
CVE-2023-4568PaperCut NG Unauthenticated XMLRPC | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-39143CVE-2023-39143 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published08/04/2023 | SeverityCritical |
CVE-2023-3486PaperCut NG Unauthenticated File Upload | Exploitation statusPublic exploit | FixYes | Affected productPaperCut NG | Published07/25/2023 | SeverityHigh |
CVE-2023-2533PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF | Exploitation statusKEV | FixYes | Affected productPaperCut NG/MF | Published06/20/2023 | SeverityHigh |
CVE-2023-27351CVE-2023-27351 | Exploitation statusKEV | FixNot confirmed | Affected productNG | Published04/20/2023 | SeverityHigh |
CVE-2023-27350CVE-2023-27350 | Exploitation statusKEV | FixNot confirmed | Affected productNG | Published04/20/2023 | SeverityCritical |
CVE-2019-12135CVE-2019-12135 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/06/2019 | SeverityUnknown |
CVE-2019-8948CVE-2019-8948 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/20/2019 | SeverityUnknown |
CVE-2014-2658CVE-2014-2658 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/28/2014 | SeverityUnknown |
CVE-2014-2657CVE-2014-2657 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/28/2014 | SeverityUnknown |
CVE-2014-2659CVE-2014-2659 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/22/2014 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
