Papercut Ng Mf vulnerabilities

CVE-2023-2533 [HIGH] CWE-352 CVE-2023-2533: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, unde A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of de

CVE-2026-82077 [HIGH] CWE-22 CVE-2026-82077: An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.

CVE-2026-6180 [HIGH] CWE-20 CVE-2026-6180: A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunctio A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notification fails to reach the server, the server may reject the init

CVE-2026-14780 [HIGH] CWE-94 CVE-2026-14780: A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insuff A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox. A successful execution enables

CVE-2026-8794 [MEDIUM] CWE-208 CVE-2026-8794: PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthe PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing

CVE-2026-8793 [MEDIUM] CWE-307 CVE-2026-8793: PaperCut NG/MF does not properly restrict excessive authentication attempts within its login compone PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.

CVE-2026-5115 [HIGH] CWE-319 CVE-2026-5115: The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the communication channel between the embedded application and the

CVE-2026-87739 [MEDIUM] CWE-639 CVE-2026-87739: An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacke An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information.

CVE-2026-6418 [MEDIUM] CWE-36 CVE-2026-6418: An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0 An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4). The application allows administrative users to configure a source path for account data synchronization. Due to a lack of proper path validation and sanitization, an authenticated user with administrative privileges can specify arbitrary file path

CVE-2026-4794 [MEDIUM] CWE-79 CVE-2026-4794: Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authentic Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's authenticated context (e.g. requires a