CVE-2023-27351 PaperCut NG
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class.…
- CVSS
- 8.2 High
- EPSS
- 78%
- Percentile
- 100
- Published
- 2023-04-20
- Force
- 10 of 12
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
On CISA’s exploited list
PaperCut NG/MF Improper Authentication Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-05-04
- Ransomware use
- known