PM
IT Management
PaperCut MF/NG
by PaperCut · last CVE Aug 28, 2026
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 12Medium 10Low 1
Watch

Add PaperCut MF/NG to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81578
In wildKEV
9.8
84%
Aug 28
PaperCut MF/NG: Authentication Bypass
Affected: before 24.1.10; 25.0.0 before 25.0.13; 26.0.0 before 26.0.5
CVE-2023-27350
RansomwareIn wildKEV
9.8
100%
Apr 20
PaperCut MF/NG Improper Access Control Vulnerability
Affected: 22.0.5 (Build 63914)
CVE-2026-82078
In wildKEV
9.1
61%
Aug 28
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
Affected: before 24.1.10; 25.0.0 before 25.0.13; 26.0.0 before 26.0.5
CVE-2023-2533
In wildKEV
8.8
29%
Jun 20
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
Affected: before 20.1.8; 21.0.0 before 21.2.12; 22.0.0 before 22.1.1
CVE-2023-27351
RansomwareIn wildKEV
7.5
78%
Apr 20
PaperCut NG/MF Improper Authentication Vulnerability
Affected: 22.0.5 (Build 63914)
Showing 5