PaperCut

Products

ProductCVEsExploitedLatest
NG42Nov 22, 2024
PaperCut MF/NG22Aug 28, 2026
PaperCut NG/MF101Sep 24, 2026
PaperCut NG, PaperCut MF12–Sep 26, 2024
Print Deploy2–Jun 22, 2026
PaperCut Hive2–Sep 24, 2026
PaperCut NG2–Sep 13, 2023
PaperCut MF1–Dec 9, 2024

Exploited and recent CVEs

  • CVE-2026-82078 Critical 9.4 Exploited PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector 63.0%
  • CVE-2026-81578 High 8.8 Exploited PaperCut MF/NG: Authentication Bypass 84.7%
  • CVE-2023-2533 High 8.4 Exploited PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF 28.8%
  • CVE-2023-27351 High 8.2 Exploited This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The spe 78.1%
  • CVE-2023-27350 Critical 9.8 Exploited This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The spe 100.0%
  • CVE-2026-11744 Low 3.8 PaperCut Hive Embedded App for Ricoh: Javascript injection 0.2%
  • CVE-2026-87739 Medium 6.9 PaperCut MF/NG: User permissions are not evaluated on report generation 0.4%
  • CVE-2026-82077 High 7.3 PaperCut NG/MF: Remote Code Execution via Scan2Fax 0.8%
  • CVE-2026-14780 High 7.5 PaperCut NG/MF: Remote Code Execution via Scripting Subsystem 0.3%
  • CVE-2026-8794 Medium 6.9 PaperCut NG/MF: User enumeration via timing attack 0.7%
  • CVE-2026-8793 Medium 6.9 PaperCut NG/MF: Insufficient brute-force protection 0.7%
  • CVE-2026-6645 High 7.3 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows 0.2%
  • CVE-2026-7824 Medium 5.9 PaperCut Hive (Ricoh): Plain text password in logs 0.2%
  • CVE-2026-6418 Medium 4.6 PaperCut NG/MF: Path Traversal in Shared Account Synchronization 0.6%
  • CVE-2026-6180 Medium 4.1 PaperCut MF: Card truncation on HP readers 0.3%
  • CVE-2026-5115 Low 3.6 Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices 0.2%
  • CVE-2026-4794 Low 2.1 Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF 0.2%
  • CVE-2025-9785 High 7.7 Misconfigured certificate validation with self-signed certificates for Print Deploy 0.1%
  • CVE-2024-9672 Medium 6.3 Reflected XSS in PaperCut MF 0.2%
  • CVE-2023-39470 High 7.2 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability 1.8%
  • CVE-2024-8404 High 7.8 Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder 0.4%
  • CVE-2024-8405 Medium 6.1 Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack 0.2%
  • CVE-2024-4712 High 7.8 Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler 0.4%
  • CVE-2024-3037 High 7.8 Arbitrary File Deletion in PaperCut NG/MF Web Print 0.4%
  • CVE-2023-39469 High 7.2 PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability 61.4%
  • CVE-2024-1884 Medium 6.5 Server Side Request Forgery in PaperCut NG/MF 37.9%
  • CVE-2024-1883 Medium 6.3 Reflected XSS in PaperCut NG/MF 61.5%
  • CVE-2024-1882 High 7.2 Server-side resource injection in PaperCut NG/MF 1.4%
  • CVE-2024-1654 High 7.2 Unauthorized write operations in PaperCut NG/MF 1.3%
  • CVE-2024-1223 Medium 4.8 Improper authorization controls in PaperCut NG/MF 0.4%