Vulnerability · Published Sep 24, 2026 · Assigned by PaperCut
CVE-2026-82077PaperCut NG/MF: Remote Code Execution via Scan2Fax
High 7.3
In plain English
A high-severity path traversal in PaperCut NG/MF from PaperCut. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 4.0)7.3High
Exploit odds (30 days)0.8%top 42.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PaperCut | PaperCut NG/MF | 0 – before 24.1.1025.0.0 – before 25.0.1326.0.0 – before 26.0.5 |
Weakness: CWE-22, CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P