en
Severity across 7 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 7 vulnerability records affecting PaperCut NG/MF.
Among the 7 records analyzed by CyStack, 1 are High or Critical and 1 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-8794PaperCut NG/MF: User enumeration via timing attack | Exploitation statusNot known exploited | FixYes | Published08/03/2026 | SeverityMedium |
CVE-2026-8793PaperCut NG/MF: Insufficient brute-force protection | Exploitation statusNot known exploited | FixYes | Published08/03/2026 | SeverityMedium |
CVE-2026-6418PaperCut NG/MF: Path Traversal in Shared Account Synchronization | Exploitation statusNot known exploited | FixYes | Published05/05/2026 | SeverityMedium |
CVE-2026-6180PaperCut MF: Card truncation on HP readers | Exploitation statusNot known exploited | FixYes | Published05/05/2026 | SeverityMedium |
CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | Exploitation statusNot known exploited | FixYes | Published03/31/2026 | SeverityLow |
CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF | Exploitation statusNot known exploited | FixYes | Published03/31/2026 | SeverityLow |
CVE-2023-2533PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF | Exploitation statusKEV | FixYes | Published06/20/2023 | SeverityHigh |
