What’s Vulnerable › Products
PaperCut MF vulnerabilities
31 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your PaperCut MF version is affected
Exploited PaperCut MF vulnerabilities
- CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability
- CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- CVE-2023-27351 — PaperCut NG/MF Improper Authentication Vulnerability
- CVE-2023-2533 — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
- CVE-2023-27350 — PaperCut MF/NG Improper Access Control Vulnerability
Latest PaperCut MF vulnerabilities
- CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability (CVSS 9.1) — exploited
- CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (CVSS 9.8) — exploited
- CVE-2026-6418 — PaperCut NG/MF: Path Traversal in Shared Account Synchronization (CVSS 4.9)
- CVE-2026-6180 — PaperCut MF: Card truncation on HP readers (CVSS 8.1)
- CVE-2026-5115 — Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices (CVSS 7.5)
- CVE-2026-4794 — Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF (CVSS 4.8)
- CVE-2024-9672 — Reflected XSS in PaperCut MF (CVSS 5.4)
- CVE-2024-8405 — Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack (CVSS 5.5)
- CVE-2024-8404 — Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder (CVSS 7.8)
- CVE-2024-4712 — Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler (CVSS 7.8)
- CVE-2024-3037 — Arbitrary File Deletion in PaperCut NG/MF Web Print (CVSS 7.8)
- CVE-2023-39469 — PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2024-1884 — Server Side Request Forgery in PaperCut NG/MF (CVSS 6.5)
- CVE-2024-1883 — Reflected XSS in PaperCut NG/MF (CVSS 6.1)
- CVE-2024-1882 — Server-side resource injection in PaperCut NG/MF (CVSS 7.2)
- CVE-2024-1654 — Unauthorized write operations in PaperCut NG/MF (CVSS 7.2)
- CVE-2024-1223 — Improper authorization controls in PaperCut NG/MF (CVSS 4.8)
- CVE-2024-1222 — Incorrect authorization controls in PaperCut NG/MF APIs (CVSS 9.8)
- CVE-2024-1221 — Improper access controls on APIs on Linux and macOS in PaperCut NG/MF (CVSS 3.1)
- CVE-2023-6006 — Privilege Escalation Vulnerability (CVSS 6.7)
- CVE-2023-31046 — (CVSS 6.5)
- CVE-2023-39143 — (CVSS 9.8)
- CVE-2023-3486 — PaperCut NG Unauthenticated File Upload (CVSS 7.5)
- CVE-2023-2533 — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability (CVSS 8.8) — exploited
- CVE-2023-27351 — PaperCut NG/MF Improper Authentication Vulnerability (CVSS 7.5) — exploited