CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PaperCut MF/NG Unsafe Dynamic Class Loading Remote Code Execution Vulnerability (CVE-2026-82078)
[Affected Scope] PaperCut MF and PaperCut NG print management solutions
[Impact] Attackers capable of manipulating system configuration parameters can execute arbitrary Java bytecode under the security context of the PaperCut server process
[Mitigation] Apply the official vendor security patches immediately and restrict access to database configuration utilities
PaperCut MF/NG Web Management Interface Improper Access Control Vulnerability (CVE-2026-81578) Advisory
[Affected Scope] Web management interface of PaperCut MF and PaperCut NG.
[Impact] Unauthenticated remote attackers can trigger backend actions and modify system configurations before access validation checks complete, potentially leading to Remote Code Execution (RCE).
[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management ports (default 9191, 9192).
PaperCut NG/MF Authentication Bypass and Remote Code Execution Vulnerability Advisory (CVE-2023-27351)
[Affected Scope] PaperCut NG and MF versions 22.0.5 (Build 63914) and earlier
[Impact] Unauthenticated remote attackers can bypass authentication to gain administrative access and execute arbitrary code with system privileges
[Mitigation] Immediately upgrade to the latest patched versions (22.0.9 or higher) and restrict external access to management ports 9191 and 9192