What’s Vulnerable › Products

PaperCut NG/MF vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your PaperCut NG/MF version is affected

Latest PaperCut NG/MF vulnerabilities

• CVE-2026-87739 — PaperCut MF/NG: User permissions are not evaluated on report generation (CVSS 6.9)
• CVE-2026-82077 — PaperCut NG/MF: Remote Code Execution via Scan2Fax (CVSS 7.3)
• CVE-2026-14780 — PaperCut NG/MF: Remote Code Execution via Scripting Subsystem (CVSS 7.5)
• CVE-2026-8794 — PaperCut NG/MF: User enumeration via timing attack (CVSS 6.9)
• CVE-2026-8793 — PaperCut NG/MF: Insufficient brute-force protection (CVSS 6.9)