PaperCut vulnerabilities
35 published CVEs name PaperCut among the affected products; CISA lists 5 of them as exploited in the wild.
- Published CVEs
- 35
- Last 12 months
- 14
- Critical
- 2
- Known exploited
- 5
Critical 2High 17Medium 12Low 4Not scored 0
CVEs per yearBy the year they were published
- 20236
- 202414
- 20251
- 202614
Known exploitedNewest addition to KEV first
- CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
PaperCut · PaperCut MF/NG
ExploitedCritical9.4 - CVE-2026-81578
PaperCut MF/NG: Authentication Bypass
PaperCut · PaperCut MF/NG
ExploitedHigh8.8 - CVE-2023-27351
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not…
PaperCut · NG
ExploitedHigh8.2 - CVE-2023-2533
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
PaperCut · PaperCut NG/MF
ExploitedHigh8.4 - CVE-2023-27350
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not…
PaperCut · NG
ExploitedCritical9.8
Newest CVEs
- CVE-2026-11744
PaperCut Hive Embedded App for Ricoh: Javascript injection
PaperCut · PaperCut Hive
Low3.8 - CVE-2026-87739
PaperCut MF/NG: User permissions are not evaluated on report generation
PaperCut · PaperCut NG/MF
Medium6.9 - CVE-2026-82077
PaperCut NG/MF: Remote Code Execution via Scan2Fax
PaperCut · PaperCut NG/MF
High7.3 - CVE-2026-14780
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
PaperCut · PaperCut NG/MF
High7.5 - CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
PaperCut · PaperCut MF/NG
ExploitedCritical9.4 - CVE-2026-81578
PaperCut MF/NG: Authentication Bypass
PaperCut · PaperCut MF/NG
ExploitedHigh8.8 - CVE-2026-8794
PaperCut NG/MF: User enumeration via timing attack
PaperCut · PaperCut NG/MF
Medium6.9 - CVE-2026-8793
PaperCut NG/MF: Insufficient brute-force protection
PaperCut · PaperCut NG/MF
Medium6.9 - CVE-2026-6645
Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
PaperCut · Print Deploy
High7.3 - CVE-2026-7824
PaperCut Hive (Ricoh): Plain text password in logs
PaperCut · PaperCut Hive
Medium5.9