MSRXPaperCut vulnerabilities being exploited
3 PaperCut flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: NG/MF. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-08-31 | CVE-2026-82078 NG/MF PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained with CVE-2026-81578. | 2026-09-14 |
| 2026-08-31 | CVE-2026-81578 NG/MF PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078. | 2026-09-14 |
| 2026-04-20 | CVE-2023-27351 NG/MF ransomwarePaperCut NG/MF Improper Authentication Vulnerability PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class. | 2026-05-04 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.