PaperCut vulnerabilities
35 CVEs and advisories name PaperCut as an affected vendor, 5 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-11744PaperCut Hive Embedded App for Ricoh: Javascript injection
- CVE-2026-87739PaperCut MF/NG: User permissions are not evaluated on report generation
- CVE-2026-82077PaperCut NG/MF: Remote Code Execution via Scan2Fax
- CVE-2026-14780PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
- CVE-2026-82078PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
- CVE-2026-81578PaperCut MF/NG: Authentication Bypass
- CVE-2026-8794PaperCut NG/MF: User enumeration via timing attack
- CVE-2026-8793PaperCut NG/MF: Insufficient brute-force protection
- CVE-2026-6645Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
- CVE-2026-7824PaperCut Hive (Ricoh): Plain text password in logs
- CVE-2026-6418PaperCut NG/MF: Path Traversal in Shared Account Synchronization
- CVE-2026-6180PaperCut MF: Card truncation on HP readers
- CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
- CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
- CVE-2025-9785Misconfigured certificate validation with self-signed certificates for Print Deploy
- CVE-2024-9672Reflected XSS in PaperCut MF
- CVE-2023-39470PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2024-8404Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder
- CVE-2024-8405Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack
- CVE-2024-4712Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler
- CVE-2024-3037Arbitrary File Deletion in PaperCut NG/MF Web Print
- CVE-2023-39469PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability
- CVE-2024-1884Server Side Request Forgery in PaperCut NG/MF
- CVE-2024-1883Reflected XSS in PaperCut NG/MF
- CVE-2024-1882Server-side resource injection in PaperCut NG/MF
- CVE-2024-1654Unauthorized write operations in PaperCut NG/MF
- CVE-2024-1223Improper authorization controls in PaperCut NG/MF
- CVE-2024-1222Incorrect authorization controls in PaperCut NG/MF APIs
- CVE-2024-1221Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
- CVE-2023-6006Privilege Escalation Vulnerability