CVE-2026-82078 PaperCut PaperCut MF/NG
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of…
- CVSS
- 9.4 Critical
- EPSS
- 63%
- Percentile
- 99
- Published
- 2026-08-28
- Force
- 10 of 12
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
PaperCut NG/MF Unsafe Reflection Vulnerability
- Added
- 2026-08-31
- Federal patch deadline
- 2026-09-14
- Ransomware use
- not known