PaperCut

Vulnerability activity for PaperCut: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 3
Critical (CVSS 9+): 1
Exploited (CISA KEV): 2
With exploit code: 2

Last 365 days

CVEs: 4
Critical (CVSS 9+): 1
Exploited (CISA KEV): 3
With exploit code: 3

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

8.8HighAug 31, 2026PaperCut NG/MF Auth bypass / access controlCVE-2026-81578PaperCut NG/MF is affected. An attacker gains administrative control of the PaperCut server. Upgrade to the latest version of PaperCut NG/MF.Added to KEV Aug 31, 2026Exploited86% likelyExploit codeMetasploit · NucleiDetection
9.4CriticalAug 31, 2026PaperCut NG/MFCVE-2026-82078PaperCut NG/MF application. An attacker gains remote code execution. Update to the latest version of PaperCut NG/MF.Added to KEV Aug 31, 2026Exploited64% likelyExploit codeMetasploit
8.2HighApr 20, 2026PaperCut NG/MF Auth bypass / access controlCVE-2023-27351PaperCut NG and PaperCut MF are affected. An attacker gains unauthorized access to administrative privileges and sensitive data. Implement immediate patches and ensure all users update to the latest version.Added to KEV Apr 20, 2026Exploited78% likelyExploit codeNucleiDetection
8.4HighJun 20, 2023PaperCut NG/MF CSRFCVE-2023-2533PaperCut NG and PaperCut MF are affected. An attacker gains unauthenticated administrative access and can execute arbitrary actions. Patch to the latest version of PaperCut NG/MF to mitigate the vulnerability.Added to KEV Jul 28, 2025 · 768 days after publicationExploited29% likelyDetection
9.8CriticalApr 20, 2023PaperCut MF/NG Auth bypass / access controlCVE-2023-27350(1) PaperCut MF/NG server and web interface are affected. (2) An attacker gains remote code execution and potentially access to sensitive data. (3) Update to the latest version of PaperCut MF/NG, and apply recommended security patches.Added to KEV Apr 21, 2023 · 1 day after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

7.3HighSep 24, 2026PaperCut NG/MF Path traversal / file handlingCVE-2026-82077An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
9.4CriticalAug 31, 2026PaperCut NG/MFCVE-2026-82078PaperCut NG/MF application. An attacker gains remote code execution. Update to the latest version of PaperCut NG/MF.Exploited64% likelyExploit codeMetasploit
8.8HighAug 31, 2026PaperCut NG/MF Auth bypass / access controlCVE-2026-81578PaperCut NG/MF is affected. An attacker gains administrative control of the PaperCut server. Upgrade to the latest version of PaperCut NG/MF.Exploited86% likelyExploit codeMetasploit · NucleiDetection
8.2HighApr 20, 2026PaperCut NG/MF Auth bypass / access controlCVE-2023-27351PaperCut NG and PaperCut MF are affected. An attacker gains unauthorized access to administrative privileges and sensitive data. Implement immediate patches and ensure all users update to the latest version.Exploited78% likelyExploit codeNucleiDetection
8.4HighJun 20, 2023PaperCut NG/MF CSRFCVE-2023-2533PaperCut NG and PaperCut MF are affected. An attacker gains unauthenticated administrative access and can execute arbitrary actions. Patch to the latest version of PaperCut NG/MF to mitigate the vulnerability.Exploited29% likelyDetection
9.8CriticalApr 20, 2023PaperCut MF/NG Auth bypass / access controlCVE-2023-27350(1) PaperCut MF/NG server and web interface are affected. (2) An attacker gains remote code execution and potentially access to sensitive data. (3) Update to the latest version of PaperCut MF/NG, and apply recommended security patches.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

See every PaperCut entry on the dashboard.