PaperCut NG/MF
- Software type
- Software application
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/08/2026, PaperCut NG/MF recorded 5 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of PaperCut NG/MF and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-87739PaperCut MF/NG: User permissions are not evaluated on report generationCVE-2026-82077PaperCut NG/MF: Remote Code Execution via Scan2FaxCVE-2026-14780PaperCut NG/MF: Remote Code Execution via Scripting SubsystemCVE-2026-8794PaperCut NG/MF: User enumeration via timing attackCVE-2026-8793PaperCut NG/MF: Insufficient brute-force protection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-87739PaperCut MF/NG: User permissions are not evaluated on report generation | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-82077PaperCut NG/MF: Remote Code Execution via Scan2Fax | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-14780PaperCut NG/MF: Remote Code Execution via Scripting Subsystem | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-8794PaperCut NG/MF: User enumeration via timing attack | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2026-8793PaperCut NG/MF: Insufficient brute-force protection | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2026-6418PaperCut NG/MF: Path Traversal in Shared Account Synchronization | Exploitation statusNot exploited | FixYes | Published05/05/2026 | SeverityMedium |
|---|
CVE-2026-6180PaperCut MF: Card truncation on HP readers | Exploitation statusNot exploited | FixYes | Published05/05/2026 | SeverityMedium |
|---|
CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | Exploitation statusNot exploited | FixYes | Published03/31/2026 | SeverityLow |
|---|
CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF | Exploitation statusNot exploited | FixYes | Published03/31/2026 | SeverityLow |
|---|
CVE-2023-2533PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF | Exploitation statusKEV | FixYes | Published06/20/2023 | SeverityHigh |
|---|
10 Results | Page 1 of 1