#papercut

3 articles

Security Alerts Aug 31, 2026

CVE-2026-81578: Missing Authentication in PaperCut NG/MF - Active Exploitation (CISA KEV)

PaperCut NG/MF does not require authentication for a critical function, which lets an unauthenticated attacker remotely change part of the system configuration. The vulnerability is being actively exploited...

Security Alerts Aug 31, 2026

CVE-2026-82078: Actively Exploited Vulnerability in PaperCut NG/MF (CISA KEV)

PaperCut NG/MF contains an unsafe reflection vulnerability that allows the system configuration to be manipulated and arbitrary Java bytecode from the application classpath to be executed. The vulnerability is being actively exploited...

Security Alerts Apr 20, 2026

CVE-2023-27351: 2023 Vulnerability Now Actively Exploited (PaperCut)

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class....