CVE-2026-6418
published 2026-05-05CVE-2026-6418: An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4). The application allows administrative users to…
PriorityP430medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
0.38%
29.5th percentile
An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4). The application allows administrative users to configure a source path for account data synchronization.
Due to a lack of proper path validation and sanitization, an authenticated user with administrative privileges can specify arbitrary file paths on the local file system. This allows for the enumeration of directory structures and the unauthorized reading of sensitive text-based configuration or system files.
When the synchronization process is triggered, the application attempts to parse the contents of the specified file, subsequently exposing the data within the application's account management interface. This vulnerability could lead to the disclosure of sensitive system information or configuration details, depending on the permissions of the service account under which the application is running.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| papercut | papercut_mf | < 25.0.11 | 25.0.11 |
| papercut | papercut_ng | < 25.0.11 | 25.0.11 |
| papercut | papercut_ng_mf | < 25.0.11 | 25.0.11 |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvdv4.04.6MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
PaperCut NG/MF up to 25.0.10 Account Synchronization absolute path traversal (Nessus ID 313101)
vuldb·2026-05-08·CVSS 4.6
CVE-2026-6418 [MEDIUM] PaperCut NG/MF up to 25.0.10 Account Synchronization absolute path traversal (Nessus ID 313101)
A vulnerability, which was classified as problematic, was found in PaperCut NG and MF up to 25.0.10. Affected is an unknown function of the component Account Synchronization Component. Such manipulation leads to absolute path traversal.
This vulnerability is listed as CVE-2026-6418. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.
GHSA
GHSA-mhwr-j844-q9pq: An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25
ghsa_unreviewed·2026-05-05
CVE-2026-6418 [MEDIUM] CWE-36 GHSA-mhwr-j844-q9pq: An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25
An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4). The application allows administrative users to configure a source path for account data synchronization.
Due to a lack of proper path validation and sanitization, an authenticated user with administrative privileges can specify arbitrary file paths on the local file system. This allows for the enumeration of directory structures and the unauthorized reading of sensitive text-based configuration or system files.
When the synchronization process is triggered, the application attempts to parse the contents of the specified file, subsequently exposing the data within the application's account management interface. This vulnerability could lead to the disclosure of sensitive system infor
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-05
Published