Low severity · published Sep 24, 2026
CVE-2026-11744
PaperCut Hive Embedded App for Ricoh: Javascript injection
3.8
CVSS
0.2%
EPSS
No
On KEV
Description
An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to the device and a specially crafted NFC card or emulator could exploit this flaw to execute arbitrary code within the context of the application's user interface. This could result in unauthorized actions or information disclosure.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PaperCut Hive · PaperCut
2.0.0 before 2.3.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-11744
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-11744
www.papercut.com
https://www.papercut.com/kb/Main/security-bulletin-sep-2026/
More from PaperCut Hive
5.9
CVE-2026-7824
PaperCut Hive (Ricoh): Plain text password in logs
