MSRXPaperCut vulnerabilities
3 PaperCut flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware. Patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-08-31 | CVE-2026-82078 PaperCut NG/MF PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained with CVE-2026-81578. | 2026-09-14 |
| 2026-08-31 | CVE-2026-81578 PaperCut NG/MF PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078. | 2026-09-14 |
| 2026-04-20 | CVE-2023-27351 PaperCut NG/MF ransomwarePaperCut NG/MF Improper Authentication Vulnerability PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class. | 2026-05-04 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.28 (live), refreshed every 12 hours.