CVE-2026-81578 PaperCut PaperCut MF/NG
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion…
- CVSS
- 8.8 High
- EPSS
- 85%
- Percentile
- 100
- Published
- 2026-08-28
- Force
- 10 of 12
- Public PoC
- 2
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
On CISA’s exploited list
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- Added
- 2026-08-31
- Federal patch deadline
- 2026-09-14
- Ransomware use
- not known