PaperCut MF/NG vulnerabilities

2 known vulnerabilities in PaperCut MF/NG from PaperCut. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  PaperCut NG/MF Unsafe Reflection Exploited

  CVE-2026-82078Aug 28, 2026PaperCutEPSS 63%

  An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approve

• 9.8 Critical severity

  PaperCut NG/MF Missing Authentication for Critical Function Exploited

  CVE-2026-81578Aug 28, 2026PaperCutEPSS 84.7%

  An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of